iConsole User Guide › Searching for Events › Derive a New Search

Derive a New Search

A derived search is similar to a customized search in that both are variations of an existing search. But unlike normal customized searches, derived searches can be published and made available to users.

It is also possible to edit the XML definition file of a derived search, allowing you to change text labels and default parameter values. In addition, unlike normal customized searches, a derived search can be based on an unpublished existing search. This is useful, for example, if you want users to use a modified version of the default iConsole Standard Search but without the 'real' Standard Search being available to them. For full implementation details, see the iConsole Search Definition Guide; search for 'derived searches'.

To derive a new search from an existing search

1. Go to the Searches page in the Administer Searches tab.
2. In the Manage Stored Searches screen:
   1. Select the check box for the search you want.
   2. From the Actions menu for that search, choose Edit Properties.
3. Edit the search properties as required.

   For example, choose which columns to show in the results screen. You can also click Customize to hide or unhide available search parameters.

4. Click Save to save the customized search.
5. In the Save Search dialog, enter a name and description for the modified search.
6. Edit the underlying XML search definition.

   See the next section.

To edit the XML search definition

Not all search modifications can be made directly in the iConsole. If you want to change the text labels for search parameters or amend other parameter attributes, you need to edit the underlying XML in the new definition file.

1. In the Manage Stored Searches screen:
   1. Select the check box for the search you want.
   2. From the Actions menu for that search, choose Export.
2. Use an XML editor to make any required changes.
3. Now re-install the modified XML search definition file.
4. In the Manage Stored Searches screen, click Install.
5. In the Install Searches dialog, specify the XML file you modified in step 2.

   The new derived search, including the latest XML modifications, is added to the Searches folder.

6. Test the new search to confirm that it returns results as expected. To do this.
   1. In the Manage Stored Searches screen, select the check box for the search you want.
   2. From the Actions menu for that search, choose Test
7. Publish the new search. To do this.
   1. In the Manage Stored Searches screen, select the check box for the search you want.
   2. From the Actions menu for that search, choose Publish.

   When you publish a new search, it becomes available to all other iConsole users and is listed in the Review tab.