Clone default saved search¶

In order to preserve the default behavior and to compare changes to new releases, it is recommended to clone the default search CrowdStrike Identities Lookup - Gen before making any changes.

Clone¶

Perform the following to clone the default search:

1. Navigate to Settings > Searches, reports, and alerts.
2. Change "App" filter to SA-CrowdStrikeIdentities.
3. Change "Owner" to All.
4. For the search named "CrowdStrike Identities Lookup - Gen" click "Edit" under Actions.
5. From the dropdown menu click "Clone."
6. (optional) Update the Title.
7. Set "Permissions" to clone.
8. Click "Clone Report" to finish.

Disable default search¶

Disable the original search:

1. For the search named "CrowdStrike Identities Lookup - Gen" click "Edit" under Actions.
2. From the dropdown menu click "Disable" to disable the default search.