Manage Data Explorer search results

After running a search in Data Explorer, you can complete any of these actions:

Edit columns in the search results table

After running a search in Data Explorer, you can change the columns that appear in the search results table.

  1. Run an analyzed log search.
  2. Click Columns.
  3. Select the fields that you want to add.
  4. Deselect the fields that you want to remove.
  5. Click Apply.

Create a custom column set

You can save a custom column set based on the current search results table view. The next time you run an analyzed log search, you can load a saved column set to quickly reconfigure the search results table view.

  1. Run an analyzed log search.
  2. Edit columns in the search results table.
  3. Click Save Columns.
  4. Review the column set.
  5. Click Save.

Apply a custom column set

You can load a custom column set to quickly reconfigure the search results table view.

You can only apply a custom column set if you created one previously. For instructions, see Create a custom column set.
  1. Run an analyzed log search.
  2. Click Load Columns.
  3. Select a custom column set.
  4. Click Load.