https://community.splunk.com/t5/Reporting/Changing-Cron-Sceheduling-Saved-Search/m-p/238655#M4813 <P>I am utilizing around 40 saved searches which runs on a CRON scheduler to populate various summary indexes. If there is an issue with underlying data, I want to stop all the saved searches and run it a different time (let's say 3 hours from the time of earlier schedule).</P> <P>Is there a way in Splunk to change the timings of all scheduled searches in one go</P> Wed, 17 Aug 2016 10:27:43 GMT diliptmonson 2016-08-17T10:27:43Z https://community.splunk.com/t5/Reporting/Changing-Cron-Sceheduling-Saved-Search/m-p/238655#M4813 <P>I am utilizing around 40 saved searches which runs on a CRON scheduler to populate various summary indexes. If there is an issue with underlying data, I want to stop all the saved searches and run it a different time (let's say 3 hours from the time of earlier schedule).</P> <P>Is there a way in Splunk to change the timings of all scheduled searches in one go</P> Wed, 17 Aug 2016 10:27:43 GMT https://community.splunk.com/t5/Reporting/Changing-Cron-Sceheduling-Saved-Search/m-p/238655#M4813 diliptmonson 2016-08-17T10:27:43Z https://community.splunk.com/t5/Reporting/Changing-Cron-Sceheduling-Saved-Search/m-p/238656#M4814 <P>I think you can do that. </P> <P>You need to enable a script execution from a particular saved search. Then from the python script you can update cron schedule for each alert.</P> Wed, 17 Aug 2016 11:11:17 GMT https://community.splunk.com/t5/Reporting/Changing-Cron-Sceheduling-Saved-Search/m-p/238656#M4814 hardikJsheth 2016-08-17T11:11:17Z