Saved Queries

what are saved queries? saved queries in threat flow allow you to save a combination of a query and a set of filters when browsing the conversation explorer , providing you with an easy way to revisit, manage, and monitor specific conversations based on your topics of interest saved queries are saved per tenant creating saved queries when browsing conversation explorer , click the ⭐ icon in the search bar you'll be prompted to give it a name we recommend trying to keep it relevant to the type of information you're hoping to gather from it there is currently no limit on how many saved queries you can create saved queries will save your query, date range, and any other filters you add using conversation explorer's filters when that filter is selected from the saved query list, all of the above will be applied to the conversations displayed viewing saved queries in conversation explorer , click the saved queries button to view a list of the saved queries you've created from here you can select one saved query at a time to surface the latest conversations based on what you had previously configured you can also delete or rename a saved query from this panel by clicking on the next to any saved query editing saved queries if a saved query is selected and you modify the query or adjust any filters, a red dot will appear to indicate unsaved changes to save these updates, open the saved query dropdown and click update creating custom intel with saved queries saved queries are a powerful organizational feature of threat flow, but there's more that can be done for example, you can add individual conversations to create custom intel , which creates a unique summary based on the conversations you select to get started, click the + icon next to any conversation this adds the conversation to the preview custom intel drawer, which when clicked, will show you all of the conversations you've selected conversations will remain in the preview until you click create intel from the drawer, you can remove any conversations you change your mind about, or add more while using conversation explorer don’t worry about losing the conversations you already added if you switch saved queries or start a new search—they’ll stay saved in the preview unless you clear your cache or switch browsers