Click Saved Queries to view a table of all of the name of your saved queries and query expressions.
You can save, run, and manage queries through the Events screen. Saved queries display in the Saved Queries sections under Inspection Events in the navigation screen. You can load and modify these saved queries to locate events in the event viewer. Through the screen, you can also remove queries and run saved queries.
When you run a query, you can cancel the query using the Cancel button. A query may take a significant amount of time or resources to run. When you cancel the query, it ends without displaying details.
When you select a saved query, it displays in the Events screen. You can click Refresh to run the query again. The results display in the Events table.

Procedure

  1. Select Events → Inspection Events → Saved Queries.
  2. Select a query. The query displays in the Event Viewer.
  3. Modify parameters as needed.
  4. Click Refresh. The returned events display in the Events table.
  5. To save the modified query and overwrite the existing saved query, click Save. This option allows you to save the modified query. To save the modified query with a new name, click Save As.