Is there a way to set Discover to open to a default saved search? I know you can set the default index pattern, but my ideal would be that - for each Space's Discover - it would open with a default saved search with all the columns set up properly. So, for instance, 'Windows Sys Admin' space would have it's Discover would open to a saved search with all the Windows event data and columns, etc. and a 'Network Admin' space's Discover would open to all the Cisco syslog data.
Hi Tim
Currently there's no way to do it, but it sounds like a potential enhancement, do you want to create a feature request?
Thx & Best,
Matthias
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.