Skip to content
LogoLogScale DocumentationFull Library Knowledge Base Release Notes Integrations Query Examples Training API GraphQL APISearch Archives Contacting Support
Help button for documentation
    • Terminology Reference
      • Actions
      • Aggregate Alert
      • Aggregation
      • Alert
      • Anomaly Detection
      • API (Application Programming Interface)
      • Archival
      • Asset
      • Asset Permissions
      • Authentication
      • Authorization
      • Automated Actions
      • Backfilling
      • Backup
      • Baseline
      • Bloom Filter
      • Bucket
      • Built-in Parsers
      • Cardinality
      • Cluster
      • Cluster Management
      • Cold Storage
      • Compression
      • Configuration
      • Correlation
      • CrowdStrike Query Language (CQL)
      • Cron
      • CrowdStrike Parsing Standard (CPS)
      • Custom Resource Definitions (CRD)
      • Dashboard
      • Data Export
      • Data Ingestion
      • Data Retention
      • Data Visualization
      • Datasource
      • Deployment
      • Dynamic Configuration
      • Endpoint
      • Enrichment
      • Environment Variables
      • Event
      • Event Fields
      • Event List
      • Extraction
      • Field
      • Field Aliasing
      • Field Data Types
      • Field Mapping
      • Field Panel
      • Filter
      • Filter Alert
      • Format Panel
      • Function
      • GraphQL
      • groupBy()
      • Groups
      • Histogram
      • Hot Storage
      • Humio Operator
      • HumioCluster
      • Identity Provider (IdP)
      • Indexing
      • Ingest Token
      • Ingestion
      • @ingesttimestamp
      • Inspection Panel
      • Installation
      • Integration
      • Join
      • Kubernetes
      • LDAP (Lightweight Directory Access Protocol)
      • License Management
      • Live Query
      • Load Balancing
      • Log Shipper
      • LogScale Query Language (CQL)
      • Lookup Table
      • Multi-Cluster-Search
      • Multi-Cluster View
      • Memory Limits
      • Metadata
      • Metadata Fields
      • Monitoring
      • Node
      • Notification
      • OAuth
      • OpenID Connect (OIDC)
      • Operator
      • Organization
      • Organization Owner
      • Parser
      • Permissions
      • Pipeline
      • Proxy Authentication
      • Query
      • Query Coordinator
      • Query Editor
      • Query Profiling
      • RBAC (Role-Based Access Control)
      • Real-time
      • Regex (Regular Expression)
      • Repository
      • Repository Permissions
      • REST API
      • Result
      • Reverse Proxy
      • Roles
      • Security Assertion Markup Language (SAML)
      • Saved Search
      • Scheduled Search
      • Search
      • Search Interface
      • Security
      • Segment
      • SIEM (Security Information and Event Management)
      • Tag
      • Tag Fields
      • Tagging
      • Template Language
      • Threshold
      • Throttling Period
      • TimeChart
      • @timestamp
      • Timestamp Parsing
      • Token
      • Transformation
      • Triggers
      • User Account
      • User Interface (UI)
      • User Management
      • User Roles
      • View
      • View-based Access Control
      • Visualization
      • Webhook
      • Widget
      • Worker Node
Falcon LogScale Documentation
/ LogScale Terminology

Scheduled Search

A query that runs automatically at specified intervals (hourly, daily, weekly, etc.). Scheduled searches can generate reports, populate summary data, or trigger actions based on their results. They're useful for regular reporting, data maintenance tasks, and batch processing workflows.

Related Content
  • Scheduled searches

Support
  • Twitter
  • LinkedIn
  • Youtube

© 2025 CrowdStrike All other marks contained herein are the property of their respective owners.

  • Other articles on this topic

    • Schedule PDF Reports
    • Triggers
  • Related Release Notes

    • Falcon LogScale 1.102.0 GA (2023-08-08)
    • Falcon LogScale 1.106.0 GA (2023-09-05)
    • Falcon LogScale 1.106.2 LTS (2023-09-27)
    • Falcon LogScale 1.106.4 LTS (2023-10-28)
    • Falcon LogScale 1.106.5 LTS (2023-11-15)
    • Falcon LogScale 1.106.6 LTS (2024-01-22)
    • Falcon LogScale 1.109.0 GA (2023-09-26)
    • Falcon LogScale 1.112.1 LTS (2023-11-15)
    • Falcon LogScale 1.112.2 LTS (2024-01-22)
    • Falcon LogScale 1.112.3 LTS (2024-01-30)
    • Falcon LogScale 1.112.4 LTS (2024-02-23)
    • Falcon LogScale 1.88.0 LTS (2023-05-24)
    • Falcon LogScale 1.88.1 LTS (2023-06-22)
    • Falcon LogScale 1.88.2 LTS (2023-07-04)
    • Falcon LogScale 1.89.0 GA (2023-05-11)
    • Falcon LogScale 1.94.0 LTS (2023-07-05)
    • Falcon LogScale 1.94.1 LTS (2023-10-28)
    • Falcon LogScale 1.94.2 LTS (2023-11-15)
  • Security (humio-audit) Events

    • Audit Log Event scheduled-search.create
    • Audit Log Event scheduled-search.delete
    • Audit Log Event scheduled-search.update

Enter search term