- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
query
shakti
Loves-to-Learn Everything
04-23-2024
10:00 AM
Hello,
Can anyone help me with the query that lists all the savedsearches in my splunk system along with the time taken by them to run completely?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

richgalloway

SplunkTrust
04-23-2024
11:17 AM
There is no out-of-the-box query for that. You have to combine a query that returns all saved searches with a query that pulls run times from the logs. These searches should get you started.
| rest /servicesNS/-/-/saved/searches
index=_internal source=*scheduler.log component=SavedSplunker status=success
---
If this reply helps you, Karma would be appreciated.
If this reply helps you, Karma would be appreciated.
