Carbon Black Cloud: How to access Saved Searches with Advanced Search Enabled

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Provide steps to access Saved Searches whether Advance Search is enabled or disabled

Environment

• Carbon Black Cloud Console: All Versions

Resolution

1. Go to Alerts or Investigate pages
2. Click 'Enable advanced search'
3. Click Search Help (question mark in a circle to the right of Search bar)
4. Select desired search from list of Saved Searches
5. Selected Saved Search will load and return results

Additional Information

• Search Help can be accessed with Advanced Search enabled or disabled
• Saved Searches used to be available only through the Search Help menu
• Improvements to Saved Searches has added them to suggested searches as one clicks into the Search bar, but all suggested searches are disabled when Advance Search is enabled