https://community.splunk.com/t5/Reporting/Search-scheduling-reports/m-p/29766#M557 <P>Is there a search that will show me what time all searches are scheduled for over a 24 hour period? Broken out by minute? I think our indexer is getting overloaded by a bunch of searches that all kick off at the same time. I'd like to see what minutes of the day have the most amount of searches scheduled for them.</P> <P>Thx.</P> Fri, 17 Jun 2011 04:57:37 GMT jambajuice 2011-06-17T04:57:37Z https://community.splunk.com/t5/Reporting/Search-scheduling-reports/m-p/29766#M557 <P>Is there a search that will show me what time all searches are scheduled for over a 24 hour period? Broken out by minute? I think our indexer is getting overloaded by a bunch of searches that all kick off at the same time. I'd like to see what minutes of the day have the most amount of searches scheduled for them.</P> <P>Thx.</P> Fri, 17 Jun 2011 04:57:37 GMT https://community.splunk.com/t5/Reporting/Search-scheduling-reports/m-p/29766#M557 jambajuice 2011-06-17T04:57:37Z https://community.splunk.com/t5/Reporting/Search-scheduling-reports/m-p/29767#M558 <P>You could try the following search:</P> <P><CODE>index=_internal savedsearch_name=* scheduled_time=* | convert timeformat="%a %b %d %H:%M:%S %Y" ctime(scheduled_time) | stats count list(scheduled_time) by savedsearch_name | sort savedsearch_name</CODE></P> Fri, 17 Jun 2011 13:50:07 GMT https://community.splunk.com/t5/Reporting/Search-scheduling-reports/m-p/29767#M558 Ant1D 2011-06-17T13:50:07Z