https://community.splunk.com/t5/Alerting/Saved-search-creation-date/m-p/561029#M10690 <P>I'm searching about how can I get the saved searches creation date, but I didn't see it in any documentation.</P><P>Is it possible to use rest command to see this info or any other command? I got only the updated field, but it's not what I need.&nbsp;</P><P>&nbsp;</P> Tue, 27 Jul 2021 14:02:52 GMT luislcruz 2021-07-27T14:02:52Z https://community.splunk.com/t5/Alerting/Saved-search-creation-date/m-p/561029#M10690 <P>I'm searching about how can I get the saved searches creation date, but I didn't see it in any documentation.</P><P>Is it possible to use rest command to see this info or any other command? I got only the updated field, but it's not what I need.&nbsp;</P><P>&nbsp;</P> Tue, 27 Jul 2021 14:02:52 GMT https://community.splunk.com/t5/Alerting/Saved-search-creation-date/m-p/561029#M10690 luislcruz 2021-07-27T14:02:52Z https://community.splunk.com/t5/Alerting/Saved-search-creation-date/m-p/561057#M10691 <P>AFAIK, KO creation dates are not saved anywhere, with the exception of file-based KOs (lookup files, dashboards, datamodels) where the operating system tracks the file creation date.&nbsp; Splunk does not access the OS file creation date.</P> Tue, 27 Jul 2021 16:59:43 GMT https://community.splunk.com/t5/Alerting/Saved-search-creation-date/m-p/561057#M10691 richgalloway 2021-07-27T16:59:43Z