Hi @mercan, 

I am assuming you are referring to our native dashboards, which use YARA-L 2.0. Even though, these dashboards share the same language, it is not possible to create rules from a dashboard query. 

Hi @mercan,

This should be something possible, dependant on which dashboarding you're referring to and its complexity, please share your search (if referring to the new preview dashboard feature), or the YAML export (if referring to the looker embedded dashboarding functionality) ensuring any sensitive data is removed, and hopefully we can create an exact replica in terms of a rule logic.

Kind Regards,

Ayman C