Example searches: “last_execution_date”, “use_alert_data_for_template”, “group”, “kql”, “api_key_created_by_user”