e6e36102f0
* [DOCS] Reorganizes concepts and discover sections * [DOCS] Updates time filter and saved query sections * Update docs/discover/save-search.asciidoc Co-authored-by: Wylie Conlon <wylieconlon@gmail.com> * [DOCS] Updates time filter and saved query doc * [DOCS] Updates images * [DOCS] Adds missing images * [DOCS] Minor edits Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com> Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>
39 lines
1.5 KiB
Plaintext
39 lines
1.5 KiB
Plaintext
[[save-open-search]]
|
|
== Save a search
|
|
A saved search persists your current view of Discover for
|
|
later retrieval and reuse. You can reload a saved search into Discover,
|
|
add it to a dashboard, and use it as the basis for a visualization.
|
|
|
|
A saved search includes the query text, filters, and optionally, the time filter. A saved search also includes the selected columns in the document table, the sort order, and the current index pattern.
|
|
|
|
[role="xpack"]
|
|
[[discover-read-only-access]]
|
|
[float]
|
|
=== Read-only access
|
|
When you have insufficient privileges to save searches, the following indicator in Kibana will be
|
|
displayed and the *Save* button won't be visible. For more information on granting access to
|
|
Kibana see <<xpack-security-authorization>>.
|
|
|
|
[role="screenshot"]
|
|
image::discover/images/read-only-badge.png[Example of Discover's read only access indicator in Kibana's header]
|
|
[float]
|
|
=== Save a search
|
|
To save the current search:
|
|
|
|
. Click *Save* in the toolbar.
|
|
. Enter a name for the search and click *Save*.
|
|
|
|
To import, export, and delete saved searches, open the main menu,
|
|
then click *Stack Management > Saved Objects*.
|
|
|
|
[float]
|
|
=== Open a saved search
|
|
To load a saved search into Discover:
|
|
|
|
. Click *Open* in the toolbar.
|
|
. Select the search you want to open.
|
|
|
|
If the saved search is associated with a different index pattern than is currently
|
|
selected, opening the saved search changes the selected index pattern. The query language
|
|
used for the saved search will also be automatically selected.
|