https://community.splunk.com/t5/Getting-Data-In/Output-saved-searches-by-owner/m-p/42668#M7974 <P>This worked great. I had to add the count argument to see them all, but this is exactly what we needed. thanks!</P> Tue, 26 Feb 2013 20:16:32 GMT ejread 2013-02-26T20:16:32Z https://community.splunk.com/t5/Getting-Data-In/Output-saved-searches-by-owner/m-p/42666#M7972 <P>To reduce duplication of efforts and clean up resource-intensive searches, I am trying to output a list of all saved searches, including the following attributes -</P> <UL> <LI>Name of search</LI> <LI>Owner</LI> <LI>Is it scheduled? </LI> <LI>Schedule time</LI> <LI>Search string</LI> </UL> <P>I have used the Splunk btool command, which provided everything except for the search owner. Is there any way to obtain this info?</P> Mon, 25 Feb 2013 19:58:14 GMT https://community.splunk.com/t5/Getting-Data-In/Output-saved-searches-by-owner/m-p/42666#M7972 ejread 2013-02-25T19:58:14Z https://community.splunk.com/t5/Getting-Data-In/Output-saved-searches-by-owner/m-p/42667#M7973 <P>This should get you started :</P> <PRE><CODE>| rest /servicesNS/-/-/saved/searches | fields title *owner* *search* *schedule* </CODE></PRE> <P>Run from the search bar</P> Mon, 25 Feb 2013 22:28:45 GMT https://community.splunk.com/t5/Getting-Data-In/Output-saved-searches-by-owner/m-p/42667#M7973 jonuwz 2013-02-25T22:28:45Z https://community.splunk.com/t5/Getting-Data-In/Output-saved-searches-by-owner/m-p/42668#M7974 <P>This worked great. I had to add the count argument to see them all, but this is exactly what we needed. thanks!</P> Tue, 26 Feb 2013 20:16:32 GMT https://community.splunk.com/t5/Getting-Data-In/Output-saved-searches-by-owner/m-p/42668#M7974 ejread 2013-02-26T20:16:32Z