To view search activity, select Investigate > Search to open the search page, and then click Search Activity from the options menu at the top right corner of the page.
Up to 1000 of the most recent searches are included in Search Activity. You can see your search activity or search activity for all users. Search results are stored for 7 days. If you rerun a search within 7 days, the initial results are returned. Otherwise, you are prompted to run a fresh search. You can run the initial search or modify and then run the updated search.
The Search Activity tab includes the following information about each search:
A star icon if the search was saved
The search query and time range
The user who ran the query
The search status
If search results are available
The number of results returned in the search
The date and time the search ran
The options menu at the end of each row allows you to save a search, rerun a search to see the initial results again, or cancel a search that is in progress.
You can filter the table based on search status (All, Completed, In Progress, or Failed), types (All, Saved, or Unsaved), and users (Current or All).
Each column can be sorted in ascending or descending order.