Data Explorer allows you to save queries so that you can run them again later. Complete these steps to edit a saved query. You can also use the Save as New Query option to save a new query based on an existing one.

1. Sign in to the Arctic Wolf Unified Portal.
2. In the navigation menu, click Data Exploration > Data Explorer.
3. Click Manage Saved Queries.
4. Find the query that you want to edit, and then click > Load Saved Query.
5. To change the query name, description, privacy settings, or custom alert settings:
   1. Click View Settings.
   2. Make changes as desired.
      For more information, see Save a query.
   3. Click Save.
      Note: If you modified the time range or query expression before this step, these changes are also be saved.
6. Optional: To modify the time range:
   1. In the Date Range fields, click Calendar.
   2. Select the desired time range or start and end dates.
7. To modify your query expression:
   1. In the Query Builder section, make the desired changes.
      For more information, see:

      • Query Builder
      • Data Explorer fields
   2. To validate your query expression, click Run Query and review your search results.
8. Do one of these actions:
   • To overwrite the saved query — Click Save Query > Save Changes.
   • To save your changes as a new query — Click Save Query > Save as New Query.