Graylog2 / Graylog2/graylog2-server

Add to query in a Saved Search

Open
#11,649 1 comment 3 reactions 0 assignees View on GitHub
feature triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

## What and why ?
A common task for Graylog users involves pivoting from one Saved Search to another. For example, a user would :
1. Load Saved Search 1
2. Search for a particular IP address in Saved Search 1
3. Deduce the username associated with that IP address
4. Load Saved Search 2
5. Search for the deduced username in Saved Search 2
6. Etc.

To reduce the time and effort spent in pivoting from one saved search to another, the idea of this feature request is to add an extra option similar to "Add to query", named "Add to query in a saved search" (see example in picture below).

When selecting this new option, the user would be prompted to select one of his Saved Searches, where the query will be added.

![Add to query in a saved search](https://user-images.githubusercontent.com/764189/142208282-2612b1ee-8f74-4762-833c-b18dbc2d7afe.png)

## Your Environment
* Graylog Version: 4.2.1

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.