https://community.splunk.com/t5/Splunk-Search/Plan-searches-by-editing-configuration-files/m-p/51924#M12607 <P>Hello everybody,</P> <P>is there a way to plan searches by editing a configuration file? Usually I plan searches through splunk web, setting start time, ending time, alerts and etc...now I want to do the same thing writing the searches into a config file. It is possible?</P> Fri, 31 May 2013 09:32:49 GMT The_dark_side_o 2013-05-31T09:32:49Z https://community.splunk.com/t5/Splunk-Search/Plan-searches-by-editing-configuration-files/m-p/51924#M12607 <P>Hello everybody,</P> <P>is there a way to plan searches by editing a configuration file? Usually I plan searches through splunk web, setting start time, ending time, alerts and etc...now I want to do the same thing writing the searches into a config file. It is possible?</P> Fri, 31 May 2013 09:32:49 GMT https://community.splunk.com/t5/Splunk-Search/Plan-searches-by-editing-configuration-files/m-p/51924#M12607 The_dark_side_o 2013-05-31T09:32:49Z https://community.splunk.com/t5/Splunk-Search/Plan-searches-by-editing-configuration-files/m-p/51925#M12608 <P>Sounds like what you want is a saved search? <A href="http://docs.splunk.com/Documentation/Splunk/5.0.2/Tutorial/Saveasearch">http://docs.splunk.com/Documentation/Splunk/5.0.2/Tutorial/Saveasearch</A></P> Fri, 31 May 2013 09:53:14 GMT https://community.splunk.com/t5/Splunk-Search/Plan-searches-by-editing-configuration-files/m-p/51925#M12608 Ayn 2013-05-31T09:53:14Z https://community.splunk.com/t5/Splunk-Search/Plan-searches-by-editing-configuration-files/m-p/51926#M12609 <P>Ok, but I want to do this allowing an application(written on my own) to edit a config file. Is this file "savedsearches.conf"?</P> Fri, 31 May 2013 11:51:18 GMT https://community.splunk.com/t5/Splunk-Search/Plan-searches-by-editing-configuration-files/m-p/51926#M12609 The_dark_side_o 2013-05-31T11:51:18Z https://community.splunk.com/t5/Splunk-Search/Plan-searches-by-editing-configuration-files/m-p/51927#M12610 <P>Ok, but I want to do this allowing an application(written on my own) to edit a config file. Is this file "savedsearches.conf"?</P> Fri, 31 May 2013 11:51:24 GMT https://community.splunk.com/t5/Splunk-Search/Plan-searches-by-editing-configuration-files/m-p/51927#M12610 The_dark_side_o 2013-05-31T11:51:24Z https://community.splunk.com/t5/Splunk-Search/Plan-searches-by-editing-configuration-files/m-p/51928#M12611 <P>Yes, It's <CODE>savedsearches.conf</CODE></P> Fri, 31 May 2013 12:08:37 GMT https://community.splunk.com/t5/Splunk-Search/Plan-searches-by-editing-configuration-files/m-p/51928#M12611 dart 2013-05-31T12:08:37Z