The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Collecting raw data with scheduled searches

Prev Next

You can use a scheduled search to regularly collect raw data behind a widget. Scheduled searches must be configured manually.

To create a scheduled search from a widget:

  1. Configure the dashboard snapshot so that the results are correct (scope, schedule, volume, etc.)

  2. Click the magnifying glass in the widget to run the corresponding search.

  3. Click Save as and choose New search.

  4. Add the name and other relevant information.

  5. Modify the query to remove the GROUPBY statement (this removes the aggregation and enables the raw data collection).

  6. Schedule the reoccurrence aligned with the dashboard snapshot schedule.

Scheduled Searches can be found on the Configure > Searches page. You can also run them on demand or download the results of previous searches.