- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
luislcruz
Engager
07-27-2021
07:02 AM
I'm searching about how can I get the saved searches creation date, but I didn't see it in any documentation.
Is it possible to use rest command to see this info or any other command? I got only the updated field, but it's not what I need.
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

richgalloway

SplunkTrust
07-27-2021
09:59 AM
AFAIK, KO creation dates are not saved anywhere, with the exception of file-based KOs (lookup files, dashboards, datamodels) where the operating system tracks the file creation date. Splunk does not access the OS file creation date.
---
If this reply helps you, Karma would be appreciated.
If this reply helps you, Karma would be appreciated.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

richgalloway

SplunkTrust
07-27-2021
09:59 AM
AFAIK, KO creation dates are not saved anywhere, with the exception of file-based KOs (lookup files, dashboards, datamodels) where the operating system tracks the file creation date. Splunk does not access the OS file creation date.
---
If this reply helps you, Karma would be appreciated.
If this reply helps you, Karma would be appreciated.
