View past search results

  1. Sign in to the Arctic Wolf Unified Portal.
  2. In the navigation menu, click Data Exploration > Raw Log History.
  3. Optional: Apply any of these filters to limit the list of saved searches:
    • In the Filter field, enter a keyword that might be in the search expression.
    • From the Run by list, select the user who ran the search.
  4. Review the log search history for your organization. This history includes searches that your CST runs on your behalf.

    The Search History table has these columns:

    Column

    Description

    Search
    The search that was run:
    • Search: The search expression.
    • Time: The date and time range that the search was limited to.
    • Sources: The log sources included in the search.

    Run by

    Who ran the search and when.

    Details

    The number of logs that matched the search expression and the volume of data.

    Actions

    The actions that you can take for a saved search.
  5. To load the results of a past search, click View Search.