As of February 20th, 2026 we have merged Starter Queries with Saved Queries and created a combined query loading interface. This provides an intuitive, scaleable solution for users to load their own saved queries as well as Huntress provided starter queries.
The "Starter Queries" dropdown button has been removed with the release of the new "Load Queries" button.
Loading Saved and Starter Queries
Loading from SIEM Dashboard
To load and run a Saved or Starter Query from the SIEM Dashboard page, select the new "Load Query" button.
This will toggle a side-panel where you can select your accounts Saved Queries, or Huntress provided Starter Queries.
You can switch between Saved Queries and Starter Queries via the tabs at the top of the panel.
You can also search for specific queries via the search field which will dynamically update the list of queries depending on the tab you're currently in.
Selecting a Query will reload the SIEM Dashboard page with the query pre-populated in the Query field. The query will automatically start, however you will likely want to adjust the date-time range as needed.
Loading from Manage Queries
The Manage Queries page remains unchanged for Saved Queries, however it now has an additional tab listing Starter Queries as well.
Starter Queries can be loaded and searched in the SIEM Dashboard page by selecting "Search Now" from the Manage Queries page.
Saved Queries can be loaded and searched in the SIEM Dashboard page by selecting the three dot action button and then "Search Now".