Data Explorer allows you to save queries so that you can run them again later. Complete these steps to edit a saved query. You can also use the Save as New Query option to save a new query based on an existing one.

1. Sign in to the Arctic Wolf Unified Portal.
2. In the navigation menu, click Data Exploration > Data Explorer.
3. Click Saved Queries.
4. On the Saved Queries page, find the query that you want to edit, and then click Edit Query.
5. In the New Query Settings dialog, change the query name, description, privacy settings, or custom alert settings.
   For more information, see Save a query.
6. Click Save Updates.
   Note: If you modified the time range or query expression before this step, these changes are also be saved.
7. Optional: To modify the time range:
   1. In the Date Range fields, click Calendar.
   2. Select the desired time range or start and end dates.
8. To modify your query expression:
   1. In the Query Builder section, make the desired changes.
      For more information, see:

      • Query Builder
      • Data Explorer fields
   2. To validate your query expression, click Run Query and review your search results.
9. Do one of these actions:
   • To overwrite the saved query — Click Save Query > Save Changes.
   • To save your changes as a new query — Click Save Query > Save as New Query.