Skip to content
This repository was archived by the owner on Sep 2, 2025. It is now read-only.

Commit a3363da

Browse files
author
Tracey Carter
committed
updated save share log queries
1 parent 33dea21 commit a3363da

File tree

1 file changed

+8
-9
lines changed

1 file changed

+8
-9
lines changed

logs/save-share.rst

Lines changed: 8 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -5,13 +5,12 @@ Save and share Log Observer Connect queries
55
*****************************************************************
66

77
.. meta::
8-
:description: Collaborate with team members by sharing Log Observer or Log Observer Connect queries. Saved queries include filters, aggregations, and search-time rules.
8+
:description: Collaborate with team members by sharing Log Observer Connect queries. Saved queries include filters, aggregations, and search-time rules.
99

1010

1111
After you create useful queries in Log Observer Connect, you can save them and share them with team members. You can only save or share queries on the :guilabel:`Splunk Observability Cloud data` index. A saved query is made up of a filter and any aggregations or search-time rules you applied during the search. You can only save a query if you have created a filter.
1212

13-
To learn how to create filters, see :ref:`logs-keyword`.
14-
Log Observer Connect has no default aggregation. Log Observer defaults to :guilabel:`All (*)`` logs grouped by :guilabel:`Severity`. To learn how to create a unique aggregation, see :ref:`logs-aggregations`.
13+
To learn how to create filters, see :ref:`logs-keyword`. Log Observer Connect has no default aggregation. To learn how to create a unique aggregation, see :ref:`logs-aggregations`.
1514

1615
.. note::
1716
All organizations have access to pre-defined queries for Kubernetes and Cassandra. These queries appear at the beginning of the list of saved queries and are a part of content packs. Content packs include pre-defined saved queries as well as log processing rules. Splunk Observability Cloud includes content packs for Kubernetes System Events and Cassandra.
@@ -20,10 +19,10 @@ You can also download the results of a query as a CSV or JSON file. See :ref:`ex
2019

2120
Prerequisites
2221
================================================================================
23-
To save and share Log Observer queries, you must have an administrator or power user role.
22+
To save and share Log Observer Connect queries, you must have an administrator or power user role.
2423

2524

26-
Save a Log Observer query
25+
Save a Log Observer Connect query
2726
================================================================================
2827

2928
To create a query, follow these steps:
@@ -41,12 +40,12 @@ To create a query, follow these steps:
4140
#. In the :guilabel:`Name` text box, enter a name for your query.
4241
#. Optionally, you can describe the query in the :guilabel:`Description` text box.
4342
#. Optionally, in the :guilabel:`Tags` text box, enter tags to help you and your team locate the query.
44-
Log Observer stores tags you've used before and auto-populates the :guilabel:`Tags` text box.
43+
Log Observer Connect stores tags you've used before and auto-populates the :guilabel:`Tags` text box.
4544
#. To save this query as a public query, select :guilabel:`Filter sharing permissions set to public`.
46-
When you save a query as a public query, any user in your organization can view and delete it in Log Observer.
45+
When you save a query as a public query, any user in your organization can view and delete it in Log Observer Connect.
4746

4847

49-
Use Log Observer saved queries
48+
Use Log Observer Connect saved queries
5049
================================================================================
5150

5251
You can view, share, set as default, or delete saved queries in the Saved Queries
@@ -76,7 +75,7 @@ The following table lists the actions you can take in the Saved Queries catalog.
7675
* - Delete a saved query from your Saved Queries catalog
7776
- Select the :guilabel:`More` icon for the query, then select :menuselection:`Delete Query`.
7877

79-
.. note:: If you set a saved query as default, when you open Log Observer, it displays the result of
78+
.. note:: If you set a saved query as default, when you open Log Observer Connect, it displays the result of
8079
that query.
8180

8281
.. _exportCSV:

0 commit comments

Comments
 (0)