Saved searches use case?

(Sjaak) #1


I was wondering what is the purpose of saved searches? Obviously being able to generate .csv's from the discovery page is nice, but what if for example I use a saved search for a table visualization?

For example; I have a table that queries @timestamp as a term and about 20 other items. This can get pretty slow. If I were to create a saved search with the same items, and then create the table based on that, would that be (much) faster?

What use case do saved searches have?

(Christian Dahlqvist) #2

Saved searches allow you to group an index pattern and a set of filters that are always applied. This allows you to create visualizations that only show a subset of data. The same set of filters is going to be applied though, so I am not sure I would expect any performance gain.

(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.