Our unified query management modal makes handling SPQL queries (via the Search interface) smoother and more efficient. It consolidates saving, sharing, monitoring, and exporting into a single, intuitive interface, eliminating fragmented workflows and giving you better control and visibility into your queries. This update consolidates everything that was previously scattered across separate modals, allowing you to save a query once and easily set up ongoing automation, collaboration, and alerts in a single step.
When you save a query, the modal prompts you to configure everything at once:
Name and Description: Required fields for easy identification; these apply to the saved query, any associated monitor, and automation exports.
Tags: Optional labels for organization and quick filtering (up to 4 tags).
Save Column Headers: Preserve your preferred data structure for consistent results.
Share with Organization: Share the query (and its monitor settings) with your team for reuse.
Monitor: Turn on alerts for proactive tracking. It pulls from your global Notification Settings by default, but you can override per query:
In-App alerts.
Email.
Slack.
Microsoft Teams.
Custom webhook.
Once configured, monitors appear in the Monitored Queries tab.
Note
These settings override your default account preferences under Notification Settings, but only for this query.
Create a New Query
From the left navigation, select Web Data > Web Search or Whois Data > WHOIS Search.
Select a query category and type, then add your parameters (e.g., domain name).
Click Search to run the query and review the results.
Click Save to open the modal.
Fill in Name, Description, and Tags (optional).
Toggle Save Column Headers if desired.
Enable Share with Organization for team access.
Toggle Monitor and select notification channels (e.g., Email + Slack).
Click Save to apply all settings.
Your query is now saved and ready for reuse. If you enabled sharing, it's accessible to your organization. If monitoring is toggled on, it appears in the Monitored Queries tab, displaying details such as active status, query URL, type (e.g., Web Search), creator, age, and history. Click Manage to edit notifications or toggle them on or off.
Enhanced Monitoring Options
Monitoring keeps you ahead of threats with flexible, per-query alerts. Enable it during save or edit later via Manage in Monitored Queries.
Mix and match channels (In-App, Email, Slack, Teams, Custom Webhook). The query's Name and Description auto-populate for clear tracking in alerts.
In Monitored Queries, see active status, query URL, type, creator, and history.
Click Manage to reopen the modal and update notifications, toggle the active/inactive status, or adjust sharing settings without recreating the query.
Deactivating a monitor stops alerts but preserves the saved query.
Revisit and Edit Saved Queries
Return to any saved query from Monitored Queries:
Search by name or URL.
Click Manage to edit in the unified modal, and update the Name/Description (which carries over to monitor), tags, sharing or notifications.
Toggle options on/off, which changes sync across tabs (e.g., disabling export removes it from Organization Exports).
View history or explore results directly.
This replaces the Edit Monitor Metadata modal.
Workflow Benefits
Save once, set up everything, and reduce clicks and confusion.
Tailor fields, notifications, and sharing per query.
Easy organization-wide access without duplication.
Alerts keep you informed, allowing you to focus on analysis.