https://community.splunk.com/t5/Getting-Data-In/Can-we-change-the-cron-schedule-of-a-saved-search-through-REST/m-p/261324#M50148 <P>Your URI should be something like:</P> <PRE><CODE>/servicesNS/admin/search/saved/searches/test_search -d 'cron_schedule=5 *' -d 'sharing=app' </CODE></PRE> <P>See <A href="http://docs.splunk.com/Documentation/Splunk/6.3.1511/RESTREF/RESTsearch#POST_saved.2Fsearches_method_detail">http://docs.splunk.com/Documentation/Splunk/6.3.1511/RESTREF/RESTsearch#POST_saved.2Fsearches_method_detail</A></P> <P>Also, make sure you use <CODE>curl -v</CODE> when you're testing - the HTTP response code and the response body should tell you what you're doing wrong (eg if the url is wrong, or a parameter was incorrect). If you post that information into your question here as well it will help people out. </P> Thu, 03 Dec 2015 15:57:32 GMT jplumsdaine22 2015-12-03T15:57:32Z https://community.splunk.com/t5/Getting-Data-In/Can-we-change-the-cron-schedule-of-a-saved-search-through-REST/m-p/261323#M50147 <P>I've tried something like below with no luck.</P> <PRE><CODE>curl -k -u admin:thepassword <A href="https://splunk_server:8089/servicesNS/admin/launcher/saved/searches/test_search/acl" target="test_blank">https://splunk_server:8089/servicesNS/admin/launcher/saved/searches/test_search/acl</A> -d cron_schedule=/"*5 * * * *" -d sharing=app </CODE></PRE> Thu, 03 Dec 2015 14:45:27 GMT https://community.splunk.com/t5/Getting-Data-In/Can-we-change-the-cron-schedule-of-a-saved-search-through-REST/m-p/261323#M50147 pradeepkumarg 2015-12-03T14:45:27Z https://community.splunk.com/t5/Getting-Data-In/Can-we-change-the-cron-schedule-of-a-saved-search-through-REST/m-p/261324#M50148 <P>Your URI should be something like:</P> <PRE><CODE>/servicesNS/admin/search/saved/searches/test_search -d 'cron_schedule=5 *' -d 'sharing=app' </CODE></PRE> <P>See <A href="http://docs.splunk.com/Documentation/Splunk/6.3.1511/RESTREF/RESTsearch#POST_saved.2Fsearches_method_detail">http://docs.splunk.com/Documentation/Splunk/6.3.1511/RESTREF/RESTsearch#POST_saved.2Fsearches_method_detail</A></P> <P>Also, make sure you use <CODE>curl -v</CODE> when you're testing - the HTTP response code and the response body should tell you what you're doing wrong (eg if the url is wrong, or a parameter was incorrect). If you post that information into your question here as well it will help people out. </P> Thu, 03 Dec 2015 15:57:32 GMT https://community.splunk.com/t5/Getting-Data-In/Can-we-change-the-cron-schedule-of-a-saved-search-through-REST/m-p/261324#M50148 jplumsdaine22 2015-12-03T15:57:32Z