create CLI command

Use this command to create saved searches.

To understand the syntax and examples, see:

Related topics

Managing saved searches

Creating-and-managing-dashboards

Setting-up-notifications-to-create-alerts-or-reports

Syntax

Note

Before you run the command, note the following points:

create -d <hostname> -u <username> [-s] -w <password> -p <portNumber> -e savedsearch –a <List of attributes> [-l <locale>]
  • Angle brackets (< >) indicate a variable value that needs to be user defined.
  • Square brackets ([ ]) indicate optional parameters.

The following table describes the parameters used in the syntax:

Example inputs

The following example provides the input for creating a saved search for the time context of "Last 7 days" (10080 minutes).

Note that this saved search is not marked as public and all the inputs containing the space character are enclosed in double quotes.

create -d localhost -u admin -w admin12345 -p 9797 -e savedsearch -a queryName="Star Query for relative time",queryString="*",description="Query with *",relativeMinutes=10080,share=false

The following example provides the input for creating a saved search for the time context, "Aug 16 2013 5:30 PM - Aug 23 2013 8:00 PM".

Note that this saved search is marked as public and all the inputs containing the space character are enclosed in double quotes.

create -d localhost -u admin -w admin12345 -p 9797 -e savedsearch -a queryName="Star Query for absolute time",queryString="*",description="Query with *",startTime=1376654400000,endTime=1377268200000,absoluteTime=true,share=true

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*