Documentation forSecurity Event Manager

Import and export historical event queries in SEM

You can export search queries from SEM historical events in JSON format either as individual queries or by exporting all. You can then import these queries at a later date as required.

Export a query

To export a single query:

  1. Navigate to Historical Events.
  2. Select the queries tab.
  3. Move the cursor over the required query and click on the three vertical dots icon.

    The Queries menu is displayed.

  4. Click Export.
  5. Enter a meaningful filename and click Save.

Export all queries

To export all search queries:

  1. Navigate to Historical Events.
  2. Select the queries tab.
  3. Click the gear icon at the top of the queries list.

    The Manage Saved queries window is displayed.

  4. Click Export All.
  5. Enter a meaningful filename and click Save.

Import a query

To import a search query:

  1. Navigate to Historical Events.
  2. Select the queries tab.
  3. Click the gear icon at the top of the queries list.

    The Manage Saved queries window is displayed.

  4. Click Import.

    The Import Queries window is displayed.

  5. Click Browse file and navigate to the required JSON file.
  6. Click Open, then click Import.
  7. If a search query with the same name exists the import will not occur.

You can import a JSON file containing multiple queries in the same way.