Submit a ticketCall us

Have You Auto Renewed? If not, you're missing out.
The SolarWinds Renewal Program comes with a host of benefits including the most recent product updates, 24/7 technical support, virtual instructor-led training and more. Experience all of this with the convenience of Auto Renewal, and never worry about missing any of these great benefits. Learn More.

Home > Success Center > Log & Event Manager (LEM) > LEM Administrator's Guide > Manage nDepth search queries in LEM: Save, schedule, run on-demand, and more

Manage nDepth search queries in LEM: Save, schedule, run on-demand, and more

Updated: September 15, 2017

This topic documents how to save an nDepth search query, run it on-demand or at a later date, and export the search results. It also documents how to edit or delete saved queries.

Search queries can be saved and scheduled. Save and export your search query for disaster recovery purposes or to share it with another user when they are logged in to the console. A scheduled search can email the results to a defined user.

Save an nDepth search query

  1. Create and run an nDepth search query. See Search normalized data using nDepth search in LEM for help.

  2. Click button-gear(gray).png in the nDepth toolbar and select Save As.

    If you are modifying an existing saved search, click Save.

  3. In the Search Name field enter a report name up to 200 characters in length, and then click OK.

    SolarWinds recommends that you include the time frame in your search name, as saved searches always run with the saved time frame by default. For example, enter All Firewall Alerts - Last 24 Hours.

  4. Click OK.

    Your search appears in the Saved Searches pane appended with an icon.

    File:Success_Center/Reusable_content_-_InfoDev/LEM/Log_and_Event_Manager_Administrator's_Guide/LEM_Administrator's_Guide/0980-Manage_nDepth_search_queries_Save_schedule_run_on-demand_and_more/icon-history-ndepth-alert_18x15.png indicates an event data search.

    File:Success_Center/Reusable_content_-_InfoDev/LEM/Log_and_Event_Manager_Administrator's_Guide/LEM_Administrator's_Guide/0980-Manage_nDepth_search_queries_Save_schedule_run_on-demand_and_more/icon-history-ndepth-logmssg_17x14.png indicates an original log message search.

Edit a saved nDepth search query

To edit a saved search query, modify it and save it as a new search.

  1. Open the LEM console. See Log in to the LEM web console or Log in to the LEM desktop console for steps.

    Log in as an administrator or an auditor.

  2. Click Explore > nDepth.

  3. Click History to display the Saved Searches pane (if required).

  4. In the Saved Searches pane, click the search you want to modify.

  5. Reconfigure the search in the search bar.

  6. Click button-gear(gray).png and select Save.

    The search is saved with the new configuration.

  7. (Optional) Delete the old search query if you no longer need it. See Delete a saved nDepth search query for help.

Run a saved nDepth search query on-demand

Saved searches are stored and listed alphabetically in the Saved Searches pane.

  1. Open the LEM console. See Log in to the LEM web console or Log in to the LEM desktop console for steps.

    Log in as an administrator or an auditor.

  2. Click Explore > nDepth.

  3. Click History to display the Saved Searches pane (if required).

  4. In the Saved Searches pane, click the search you want run. Hover over the search for tooltip information.

    nDepth displays your search data.

Schedule a saved nDepth search query

Schedule a saved search to run automatically at a prescheduled time. You can also share scheduled searches between users.

If the virtual appliance is offline for an extended amount of time (such as more than a day or two), the active schedules may not run at the expected time until the appliance is back online for several hours.

  1. Open the LEM console. See Log in to the LEM web console or Log in to the LEM desktop console for steps.

    Log in as an administrator or an auditor.

  2. Click Explore > nDepth.

  3. Click History to display the Saved Searches pane (if required).

  4. Select a Saved Search from the Saved Searches pane.

  5. Click  button-gear(gray).png  and select Schedule.

  6. Complete the fields as required.

    File:Success_Center/Reusable_content_-_InfoDev/LEM/Log_and_Event_Manager_Administrator's_Guide/LEM_Administrator's_Guide/0980-Manage_nDepth_search_queries_Save_schedule_run_on-demand_and_more/lem-ug-schedule-ndepth-saved-search_419x179.png

  7. Click OK.

Delete a saved nDepth search query

You can permanently delete a search from your Saved Searches pane.

  1. Open the LEM console. See Log in to the LEM web console or Log in to the LEM desktop console for steps.

    Log in as an administrator or an auditor.

  2. Click Explore > nDepth.

  3. In the Saved Searches pane, hover over a search you want to delete.

  4. Click  icon-delete(x).png to delete the search.

  5. When prompted, click Yes to confirm.

    The saved search is deleted.

Export nDepth search results in CSV format

You can only export text results in CSV format. To export charts and graphs, see the PDFexport procedure below.

  1. Open the LEM console. See Log in to the LEM web console or Log in to the LEM desktop console for steps.

    Log in as an administrator or an auditor.

  2. Click Explore > nDepth.

  3. Review all alerts within the last ten minutes.

  4. Modify the search to extend the time frame or use the Refine Fields pane to refine your search parameters.

  5. Click File:Success_Center/Reusable_content_-_InfoDev/LEM/Log_and_Event_Manager_Administrator's_Guide/LEM_Administrator's_Guide/0980-Manage_nDepth_search_queries_Save_schedule_run_on-demand_and_more/icon-play2.png to retrieve your new results.

  6. Click Result Details.

  7. Click button-gear(gray)_17x14.png in the Result Details toolbar and select Export.

  8. Click Yes to continue.

  9. Save the file to the appropriate location.

Export nDepth search results in PDF format

You can export the results of your nDepth search to a printable report and save the report as a PDF file. PDF reports are limited to 25,000 events or log messages. If you need a larger report, use the Result Details view to export your search results to a spreadsheet in CSV format.

  1. Open the LEM console. See Log in to the LEM web console or Log in to the LEM desktop console for steps.

    Log in as an administrator or an auditor.

  2. Click Explore > nDepth.

  3. Review all alerts within the last ten minutes.

  4. Modify the search to extend the time frame or use the Refine Fields pane to refine your search parameters.

  5. Click File:Success_Center/Reusable_content_-_InfoDev/LEM/Log_and_Event_Manager_Administrator's_Guide/LEM_Administrator's_Guide/0980-Manage_nDepth_search_queries_Save_schedule_run_on-demand_and_more/icon-play2.png to retrieve your new results.

  6. Click Result Details.

  7. Click button-gear(gray)_17x14.png in the nDepth toolbar and select Export.

  8. Customize your report layout:

    1. Replace nDepth Export Report Title with a custom title as required.

    2. Click the page thumbnails and remove page elements (such as charts, graphics, and text) as required.

    3. Adjust the page layout to Portrait or Landscape as required.

    4. (Optional) Add a new page, click the Items tab, and drag item elements to add additional charts to your report.

      Some components, such as Result Details, are limited to where they can be dropped.

    5. (Optional) Click the Saved Layouts tab and click button-gear(gray)_17x14.png to create a new layout or save your layout.

  9. Click Export to PDF.

  10. Save the file to the appropriate location.

Last modified

Tags

Classifications

Public