Editing an Email Messages Saved Search

Procedure

1. To edit an Email Messages saved search, go to Detections → Email Messages, and then click the Saved searches icon.
2. Select a saved search to edit.
3. To edit the saved search, do one of the following:
   • Click the edit icon on the right side of the screen.
   • Click Advanced
4. Select an attribute and an associated operator.
5. Do one of the following to provide an action:
   • Type a value in the text box.
   • Select a value from the drop-down list.

   Tip Type a keyword to search a partial match.

   Note You can add multiple criteria entries by pressing ENTER after typing a value.

6. (Optional) Click AND or OR to include other criteria sets in the search filter.
7. Click Apply.
   The Email Messages screen updates and displays data filtered by the search criteria. All search criteria sets are displayed in a summary.
8. To save the edited saved search, click the Save icon and do one of the following:
   • To save the edited saved search with the same name, select Save.
   • To save the edited saved search with a new name, select Save as and do the following:
   1. In the Save as dialog that appears, type a name and an optional description, and then click Save.
   The name of the new saved search is added to the list of saved searches.

   Note A saved search includes any search filter you create and the current customized column settings.

9. (Optional) Click the right-arrow icon beside the saved searches drop-down list to close the advanced search feature.