Splunk Operational Intelligence Cookbook - Third Edition

Saving searches in Splunk

Once you have written a nice search in Splunk, you might wish to save the search such that you can use it again at a later date or use it for a dashboard. Saved searches in Splunk are known as Reports. To save a search in Splunk, you simply click on the Save As button on the top right-hand side of the main search bar and select Report, as shown in the following screenshot: