topic Re: No &quot;scheduled time&quot; for my saved searches in Splunk Dev https://community.splunk.com/t5/Splunk-Dev/No-quot-scheduled-time-quot-for-my-saved-searches/m-p/340211#M5173 <P>You should click <CODE>Accept</CODE> on your answer to close the question.</P> Sat, 25 Mar 2017 10:05:34 GMT woodcock 2017-03-25T10:05:34Z No "scheduled time" for my saved searches https://community.splunk.com/t5/Splunk-Dev/No-quot-scheduled-time-quot-for-my-saved-searches/m-p/340209#M5171 <P>Saved Searches not keeping configuration while changing owner by REST as below;</P> <PRE><CODE>curl -k -u admin:changeme <A href="https://SH:8089/servicesNS/&quot;owner" target="test_blank">https://SH:8089/servicesNS/"owner</A> name"/"app name"/saved/searches//acl -d owner=newOwner -d sharing=user </CODE></PRE> <P>After replace some ownership from Alerts I saw those Alerts have lost their scheduled time - they have all "none" in the list. Therefore I tried to open and saving one by one I realised those Alerts had scheduled again.<BR /> When I do the same action to the others the REST had lost them again!</P> Mon, 06 Mar 2017 06:55:03 GMT https://community.splunk.com/t5/Splunk-Dev/No-quot-scheduled-time-quot-for-my-saved-searches/m-p/340209#M5171 sylim_splunk 2017-03-06T06:55:03Z Re: No "scheduled time" for my saved searches https://community.splunk.com/t5/Splunk-Dev/No-quot-scheduled-time-quot-for-my-saved-searches/m-p/340210#M5172 <P>It appears all good now after the reload command for saved searches - the changes seems not recognized by the Splunk until it gets reloaded. Make sure to run below after changes to the scheduled searches as best practice.</P> <P>./splunk _internal call /servicesNS/newOwner/AppName/saved/searches/_reload </P> Tue, 29 Sep 2020 13:08:12 GMT https://community.splunk.com/t5/Splunk-Dev/No-quot-scheduled-time-quot-for-my-saved-searches/m-p/340210#M5172 sylim_splunk 2020-09-29T13:08:12Z Re: No "scheduled time" for my saved searches https://community.splunk.com/t5/Splunk-Dev/No-quot-scheduled-time-quot-for-my-saved-searches/m-p/340211#M5173 <P>You should click <CODE>Accept</CODE> on your answer to close the question.</P> Sat, 25 Mar 2017 10:05:34 GMT https://community.splunk.com/t5/Splunk-Dev/No-quot-scheduled-time-quot-for-my-saved-searches/m-p/340211#M5173 woodcock 2017-03-25T10:05:34Z