Saving a search query removes the need to enter the query in the Search bar again and ensures that the search is retained if the Search Activity table exceeds the maximum number of rows. Anyone in the SOC can see and run all saved searches.
A more experienced analyst can create queries and save them so other analysts can run them. To save time, you can save a search that is complex or that you plan to run frequently. You can run a saved search as is, or modify and then run the updated search. You can save the updated search with the same name, which overwrites the initial search, or save it as a new search.
Note
You can edit a saved query you created. You cannot edit a saved query someone else created.