| Action | Mac | Windows/Linux |
|---|---|---|
| Add filter expression Enter or exit regex mode | ⌘/ | ⌃/ |
| Select all filters in the current group | ⌘A | ⌃A |
| Copy selected filters | ⌘C | ⌃C |
| Paste | ⌘V | ⌃V |
| Undo | ⌘Z | ⌃Z |
| Redo | ⇧⌘Z | ⇧⌃Z |
| Delete selected filters | ⌫ | ⌫ |
.
* To create an exclusive filter, click 
.
3. View the new filter expression in the search bar at the top of the window.
4. To refresh the search results, click **Search**.
{% endtab %}
{% tab title="Results summary chart" %}
**How to create a filter expression from a summary chart**
* Within a summary chart, hover over a row value.
.
* To create an exclusive filter, click .
{% endtab %}
{% endtabs %}
### How to replace filter expressions with a value from results
{% tabs %}
{% tab title="Slide-out panel" %}
**How to replace filter expressions with a value from the results table**
1. In the results table, locate the event row of interest, and click it.
* The JSON event slide-out panel will be shown.
2. In the JSON event slide-out panel, hover over the field on which you'd like to pivot.
3. Click the replace icon 
.
* All existing filters are replaced with a filter expression representing only the key/value you pivoted on.
4. To refresh the search results, click **Search**.
{% endtab %}
{% tab title="Results summary chart" %}
**How to replace filter expressions with a value from summary charts**
1. Within a summary chart, hover over the value you would like to replace filter expression values with.\
2. Click the replace icon .
* All existing filters are replaced with a filter expression representing only the key/value you pivoted on.
3. To refresh the search results, click **Search**.
{% endtab %}
{% endtabs %}
### How to explore enrichment data for a value from results
{% tabs %}
{% tab title="Slide-out panel" %}
**How to explore enrichment data for a value from the JSON event slide-out panel**
1. In the results table, locate the event row of interest, and click it.
* The JSON event slide-out panel will be shown.
2. In the JSON event slide-out panel, hover over the value you'd like to explore [enrichment data](https://docs.panther.com/enrichment) for.\
3. Click the enrichment icon 
.
4. In the **Lookup Enrichment** pop-up modal, use the **`LOOKUP TABLE`** column to locate the row of the enrichment source you would like to explore, then click **`View JSON→`**.\
* The enrichment entry will be shown.\
{% endtab %}
{% tab title="Results summary chart" %}
**How to explore enrichment data for a value from a summary chart**
1. Within a summary chart, hover over a value for which you would like to explore [enrichment data](https://docs.panther.com/enrichment).\
2. Click the enrichment icon .
3. In the **Lookup Enrichment** pop-up modal, use the **`LOOKUP TABLE`** column to locate the row of the enrichment source you would like to explore, then click **`View JSON→`**.\
* The enrichment entry will be shown.\
{% endtab %}
{% endtabs %}
## Sharing a Search
While investigating or threat hunting, it may be useful to share a Search or a results set with your team. To do this:
1. In the upper-right corner of the results table, click **Share**:
