Manage nDepth search queries in SEM: Save, schedule, run on-demand, and more

This section explains how to save an nDepth search query, run it on-demand or at a later date, and export the search results. It also describes how to edit or delete saved queries.

Search queries can be saved and scheduled. Save and export your search query for disaster recovery purposes or to share it with another user when they are logged in to the console. A scheduled search can email the results to a defined user.

Save an nDepth search query

  1. Create and run an nDepth search query. See Search normalized data using nDepth search in SEM for help.

  2. In nDepth, click , and then select Save As.

    If you are modifying an existing saved search, click Save.

  3. In the Search Name field, enter a report name up to 200 characters in length, and then click OK.

    SolarWinds recommends that you include the time frame in your search name, as saved searches always run with the saved time frame by default. For example, enter All Firewall Alerts - Last 24 Hours.

  4. Click OK.

    Your search appears in the Saved Searches pane appended with an icon.

    • indicates an event data search.
    • indicates an original log message search.

Edit a saved nDepth search query

To edit a saved search query, modify it and save it as a new search.

  1. Open the SEM console. See Log in to the SEM web console for steps.

    Log in as an administrator or an auditor.

  2. On the SEM toolbar, navigate to Explore > nDepth.

  3. To display the Saved Searches pane (if required), click History in the upper-left corner.

  4. In the Saved Searches pane, click the search you want to modify.

  5. In the search bar, reconfigure the search.

  6. Click , and then select Save.

    The search is saved with the new configuration.

  7. Delete the old search query if you no longer need it. See Delete a saved nDepth search query for help (Optional).

Run a saved nDepth search query on demand

Saved searches are stored and listed alphabetically in the Saved Searches pane.

  1. Open the SEM console. See Log in to the SEM web console for steps.

    Log in as an administrator or an auditor.

  2. On the SEM toolbar, navigate to Explore > nDepth.

  3. To display the Saved Searches pane (if required), click History in the upper-left corner.

  4. In the Saved Searches pane, click the search you want run. Move the pointer over the search for tooltip information.

    nDepth displays your search data.

Schedule a saved nDepth search query

Schedule a saved search to run automatically at a prescheduled time. You can also share scheduled searches between users.

If the virtual appliance is offline for an extended amount of time (such as more than a day or two), the active schedules may not run at the expected time until the appliance is back online for several hours.

  1. Open the SEM console. See Log in to the SEM web console for steps.

    Log in as an administrator or an auditor.

  2. On the SEM toolbar, navigate to Explore > nDepth.

  3. To display the Saved Searches pane (if required), click History.

  4. From the Saved Searches pane, select a Saved Search.

  5. Click , and then select Schedule.

  6. Complete the fields as required.

  7. Click OK.

Delete a saved nDepth search query

You can permanently delete a search from your Saved Searches pane.

  1. Open the SEM console. See Log in to the SEM web console for steps.

    Log in as an administrator or an auditor.

  2. On the SEM toolbar, navigate to Explore > nDepth.

  3. In the Saved Searches pane, move the mouse over a search you want to delete.

  4. To delete the search, click .

  5. When prompted, click Yes to confirm.

    The saved search is deleted.

Export nDepth search results in CSV format

You can only export text results in CSV format. To export charts and graphs, see the PDF export procedure below.

  1. Open the SEM console. See Log in to the SEM web console for steps.

    Log in as an administrator or an auditor.

  2. On the SEM toolbar, navigate to Explore > nDepth.

  3. Review all alerts within the last ten minutes.

  4. To refine your search parameters, modify the search to extend the time frame, or use the Refine Fields pane.

  5. To retrieve your new results, click .

  6. On the nDepth toolbar, click Result Details.

  7. In the Result Details pane, click , and then select Export to CSV.

  8. To continue, click Yes.

  9. Save the file to the appropriate location.

Export nDepth search results in PDF format

You can export the results of your nDepth search to a printable report and save the report as a PDF file. PDF reports are limited to 25,000 events or log messages. If you need a larger report, use the Result Details view to export your search results to a spreadsheet in CSV format.

  1. Open the SEM console. See Log in to the SEM web console for steps.

    Log in as an administrator or an auditor.

  2. On the SEM toolbar, navigate to Explore > nDepth.

  3. Review all alerts within the last ten minutes.

  4. Modify the search to extend the time frame or use the Refine Fields pane to refine your search parameters.

  5. To retrieve your new results, click .

  6. On the nDepth toolbar, click Result Details.

  7. On the nDepth page, click , and then select Export. Do not click the gear icon in the Result Details pane, click the gear in the upper-right corner above.

  8. Customize your report layout:

    1. Replace nDepth Export Report Title with a custom title as required.

    2. Click the page thumbnails and remove page elements (such as charts, graphics, and text) as required.

    3. Adjust the page layout to Portrait or Landscape as required.

    4. Add a new page, click the Items tab, and drag item elements to add additional charts to your report (Optional).

      Some components, such as Result Details, are limited to where they can be dropped.

    5. Click the Saved Layouts tab and click to create a new layout or save your layout (Optional) .

  9. Click Export to PDF.

  10. Save the file to the appropriate location.