Create Sighting Search queries
concept brazil Updated Sep 10, 2026 1 min read manage-sighting-search-configurations.md
Sighting search configurations define queries that search for observables across your security environment during investigations. Configure these queries to determine how often specific indicators appear in your data sources.
Parent Topic:Configure Sighting Search
Keywords sighting search configurationsighting search queriesobservable search
22 lines · 1.3 KB
--- title: Create Sighting Search queries description: Sighting search configurations define queries that search for observables across your security environment during investigations. Configure these queries to determine how often specific indicators appear in your data sources. locale: en-US canonical_url: https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/manage-sighting-search-configurations.html release: brazil product: Threat Intelligence Security Center classification: threat-intelligence-security-center topic_type: concept last_updated: "2026-09-10" reading_time_minutes: 1 keywords: [sighting search configuration, sighting search queries, observable search] breadcrumb: [Configure Sighting Search, TISC Enrichment integrations, TISC Integrations, Integrate, Threat Intelligence Security Center, Security Operations] --- # Create Sighting Search queries Sighting search configurations define queries that search for observables across your security environment during investigations. Configure these queries to determine how often specific indicators appear in your data sources. **Parent Topic:**[Configure Sighting Search](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/threat-intelligence-security-center/configure-sighting-search.md)
| title | Create Sighting Search queries |
| description | Sighting search configurations define queries that search for observables across your security environment during investigations. Configure these queries to determine how often specific indicators appear in your data sources. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/manage-sighting-search-configurations.html |
| release | brazil |
| product | Threat Intelligence Security Center |
| classification | threat-intelligence-security-center |
| topic_type | concept |
| last_updated | 2026-09-10 |
| reading_time_minutes | 1 |
| keywords | sighting search configurationsighting search queriesobservable search |
| breadcrumb | Configure Sighting SearchTISC Enrichment integrationsTISC IntegrationsIntegrateThreat Intelligence Security CenterSecurity Operations |