CmdID / az / az monitor / az monitor log-analytics / az monitor log-analytics workspace / az monitor log-analytics workspace saved-search
az monitor log-analytics workspace saved-search create
Create a saved search for a given workspace. Azure CLI reference