You must have the Create Fieldsets permission.
You can specify a fieldset that determines a group of search result fields the system displays in the Events table. In the table, each field can provide the ten most and less common values. Multiple searches can share a fieldset, and new searches display a default fieldset that contains the most common event fields. Use the fieldsets window to view and add the customize and system fieldsets, including lookup lists.
System: Predefined fieldsets provided by the system.
Custom: Customize the default fieldsets and lookup list fields for individual purposes.
New searches display the user´s default fieldset. These will remain selected in the fieldsets drop-down even when moving to other search tabs. If you select another fieldset, the popup window closes, displaying the new option. A message will display allowing you to revert the change to the previously selected fieldset.
NOTE:Whenever you replace or update the fieldset, your search becomes out of sync, since the fields shown might differ from the new selection. Rerun the search with the new selection to correct this.
To access the fieldsets window, from the Search page, click the fieldset located at the left of the time range selector. By default, the system displays the name of the last used fieldset. You can also perform the following actions:
Filter fieldsets by lists
Search fieldsets by name or specific field
You can designate a fieldset as your preferred default. The fieldset will only be used for your search results and will not affect other users connecting to the same system.
From the Search page, click the fieldset shown to the left of the time range selector.
From the fieldsets window, click Create Fieldsets.
To view the complete list of available fieldsets, click the filter icon.
Recently Created Fieldsets
My Fieldsets
Recently Updated Fieldsets
All Fieldsets
From the Search page, click the fieldset name (at the left of the time range selector).
From the fieldsets window, click Create Fieldsets.
Click + Add Fieldset.
Select or deselect the options, including lookup fields.
Drag and drop any field to the Selected Fields column. Otherwise, select Text Editor to enter the fields that you need.
To locate a specific field, use the search field.
NOTE:The fieldset editor displays the coding-style name for search fields. For more information about which fields to choose or type, see Section A.0, Mapping Database Names to their Appropriate Search Fields.
Specify a name for the new fieldset.
Each fieldset should have a unique name.
Fieldset names are not case sensitive.
To save the fieldset as default, select the checkbox at the bottom left corner.
The fieldset is used only for your search results and does not affect other users connecting to the same system.
Click Save.
(Optional) Select Apply to this search to customize the original fieldset without overwriting or saving it.
This new option displays in the custom category as Custom. The temporary fieldset will not be visible to other users, and it will only remain available on that session. After you log out, the system removes the temporary fieldset. You can have one temporal custom fieldset at a time.
To execute the query again, click Search.
You can edit custom fieldsets only. You cannot modify system fieldsets, and you can only edit one fieldset at the time.
From the Search page, click the fieldset shown to the left of the time range selector.
(Conditional) To update the currently selected fieldset, from the fieldsets window, select Edit Fieldset.
(Conditional) To update a different fieldset, click Create Fieldsets, and then select the edit icon.
Select or deselect the options, including lookup fields.
Drag and drop any field to the Selected Fields column. Otherwise, select Text Editor to write the fields you need.
To locate a specific field, use the Search field.
Update the fieldset name as needed.
To save the fieldset as default, select the box at the bottom left corner.
The fieldset is used only for your search results and does not affect other users connecting to the same system.
Click Save.
(Optional) Select Apply to this search to customize the existing fieldset without overwriting or saving it.
This option displays in the custom category as Custom. The temporary fieldset will not be visible to other users, and it will only remain available on that session. After you log out, the system removes the temporary fieldset. You can have one temporal custom fieldset at a time.
You can delete a fieldset that you have created . If you delete a fieldset that’s used in an active search, Search changes the fieldset name to Custom for that search. You cannot delete a system fieldset.
From the Search page, click the fieldset shown to the left of the time range selector.
Select Create Fieldsets.
Select the fieldset name checkbox to delete.
Select the delete icon.
Select Yes to proceed.
When you clone a fieldset, Search creates a copy of the existing fieldset under the shared fieldsets category. You can update the cloned fieldset and give it a different name.
From the Search page, click the fieldset shown to the left of the time range selector.
Select Create Fieldsets.
Select the specific fieldset checkbox to copy, and then select Clone.