Scheduling searches

You can schedule searches to run on a regular basis.

Option Description More information
Report After you save a search as a report, you can convert that report into a scheduled report. A scheduled report is a report that runs on a scheduled interval, and which can trigger an action each time the report runs. There are two actions available for scheduled reports: Send email and Run a script. See Schedule reports in the Reporting Manual.
Dashboard panel There are several options to create a scheduled report:
  • You can create a dashboard panel that is based on that scheduled report.
  • When you save an ad hoc search as a dashboard panel, the panel refers to the search as an inline search. You can edit the dashboard panel to convert the search to a report and then schedule the report.
 See Working with dashboard panels in the Dashboards and Visualizations manual.
Alert You can create a scheduled alert to search for events on a regular schedule. You can configure scheduling, trigger conditions, and throttling to customize the alert. See Create scheduled alerts in the Alerting Manual.