https://community.splunk.com/t5/Splunk-Search/How-can-I-extract-the-exact-search-string-for-modified-saved/m-p/287224#M86960 <P>Hi,</P> <P>It might not fully answer your question but I think it's a good start if you take a look at my answers here:</P> <P><A href="https://answers.splunk.com/answers/363829/how-can-filter-top-search-in-a-month-with-timefram.html">https://answers.splunk.com/answers/363829/how-can-filter-top-search-in-a-month-with-timefram.html</A></P> <P>It was a very long discussion on how to list saved searches and who has been and hasn't been using them in the last two months.<BR /> It contains the search string you are looking for.</P> Mon, 11 Apr 2016 16:51:38 GMT javiergn 2016-04-11T16:51:38Z https://community.splunk.com/t5/Splunk-Search/How-can-I-extract-the-exact-search-string-for-modified-saved/m-p/287223#M86959 <P>Hi All,</P> <P>I want to list all the saved searches which are modified <EM>(action=edit)</EM> from the logs, but the exact search string is not visible in the logs. Can some one guide me on how to approach this one?</P> Mon, 11 Apr 2016 10:32:24 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-extract-the-exact-search-string-for-modified-saved/m-p/287223#M86959 bainskaransingh 2016-04-11T10:32:24Z https://community.splunk.com/t5/Splunk-Search/How-can-I-extract-the-exact-search-string-for-modified-saved/m-p/287224#M86960 <P>Hi,</P> <P>It might not fully answer your question but I think it's a good start if you take a look at my answers here:</P> <P><A href="https://answers.splunk.com/answers/363829/how-can-filter-top-search-in-a-month-with-timefram.html">https://answers.splunk.com/answers/363829/how-can-filter-top-search-in-a-month-with-timefram.html</A></P> <P>It was a very long discussion on how to list saved searches and who has been and hasn't been using them in the last two months.<BR /> It contains the search string you are looking for.</P> Mon, 11 Apr 2016 16:51:38 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-extract-the-exact-search-string-for-modified-saved/m-p/287224#M86960 javiergn 2016-04-11T16:51:38Z https://community.splunk.com/t5/Splunk-Search/How-can-I-extract-the-exact-search-string-for-modified-saved/m-p/287225#M86961 <P>I believe the search string is not logged on edit, consider using version control.</P> Mon, 11 Apr 2016 21:12:06 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-extract-the-exact-search-string-for-modified-saved/m-p/287225#M86961 martin_mueller 2016-04-11T21:12:06Z