https://community.splunk.com/t5/Splunk-Cloud-Platform/How-to-get-SVC-Usage-for-Saved-Searches-and-Ad-hoc-searches/m-p/666524#M2598 <P>I don't have access to this app.&nbsp; I will ask an admin though.</P> Fri, 27 Oct 2023 12:59:50 GMT weidertc 2023-10-27T12:59:50Z https://community.splunk.com/t5/Splunk-Cloud-Platform/How-to-get-SVC-Usage-for-Saved-Searches-and-Ad-hoc-searches/m-p/666166#M2591 <P>How can I get the SVC Usage for Saved Searches and Ad-hoc searches?&nbsp; These logs don't have it.</P><LI-CODE lang="css">index="_internal" data.searchType="scheduled"</LI-CODE><P>&nbsp;</P><LI-CODE lang="css">index="_audit" sourcetype="audittrail" action="search" info="completed"</LI-CODE><P>&nbsp;</P> Wed, 25 Oct 2023 14:48:05 GMT https://community.splunk.com/t5/Splunk-Cloud-Platform/How-to-get-SVC-Usage-for-Saved-Searches-and-Ad-hoc-searches/m-p/666166#M2591 weidertc 2023-10-25T14:48:05Z https://community.splunk.com/t5/Splunk-Cloud-Platform/How-to-get-SVC-Usage-for-Saved-Searches-and-Ad-hoc-searches/m-p/666256#M2593 <P>Have you taken a look in your Monitoring Console within the Splunk UI? E.g.&nbsp;</P><P>&nbsp;</P><LI-CODE lang="markup">$Your Splunk Instance$/app/splunk_monitoring_console/scheduler_activity_instance</LI-CODE><P>&nbsp;</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="_JP_1-1698271380844.png" style="width: 655px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/27816i512CF787CA98269E/image-dimensions/655x383?v=v2" width="655" height="383" role="button" title="_JP_1-1698271380844.png" alt="_JP_1-1698271380844.png" /></span></P><P>&nbsp;</P><P>You can also open up the searches for those various panels to see what data they are looking at (a lot of them are hitting REST endpoints)</P><P>&nbsp;</P><P>(on edit:&nbsp; I am now realizing that you might be referring to specific SVC usage from a cloud perspective and not just "what are my scheduled searches doing?&nbsp; But if this sort of metric doesn't exist for the cloud admin dashboards, maybe they should...)</P><P>&nbsp;</P><P>&nbsp;</P> Wed, 25 Oct 2023 22:05:18 GMT https://community.splunk.com/t5/Splunk-Cloud-Platform/How-to-get-SVC-Usage-for-Saved-Searches-and-Ad-hoc-searches/m-p/666256#M2593 _JP 2023-10-25T22:05:18Z https://community.splunk.com/t5/Splunk-Cloud-Platform/How-to-get-SVC-Usage-for-Saved-Searches-and-Ad-hoc-searches/m-p/666524#M2598 <P>I don't have access to this app.&nbsp; I will ask an admin though.</P> Fri, 27 Oct 2023 12:59:50 GMT https://community.splunk.com/t5/Splunk-Cloud-Platform/How-to-get-SVC-Usage-for-Saved-Searches-and-Ad-hoc-searches/m-p/666524#M2598 weidertc 2023-10-27T12:59:50Z