Reporting

Update search string of a saved search without using Manager?

jkeglovitz
Explorer

Is it possible to update the search string of an existing saved search without using Manager? This would make it easier to iterate on a saved search directly from the Search UI.

For instance, if I pull up a saved search in the context of one of my Splunk apps, I'd like to edit the search and save it without being asked to create a new search. If I supply the same name, I get an error that a search with that name already exists.

Tags (1)
0 Karma
1 Solution

gkanapathy
Splunk Employee
Splunk Employee

Not in the current version (4.2) of Splunk via the default Splunk web GUI, no, it is not.

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

Not in the current version (4.2) of Splunk via the default Splunk web GUI, no, it is not.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...