Hi,
Is it possible to write a search that shows the selected timeranges for all saved searches? The result table would be like
app | saved search | earliest | latest
Thanks in advance
Hi HeinzWaescher,
| rest /servicesNS/-/-/saved/searches splunk_server=* | table eai:acl.app, title, search, dispatch.earliest_time, dispatch.latest_time
3no.
Hi HeinzWaescher,
| rest /servicesNS/-/-/saved/searches splunk_server=* | table eai:acl.app, title, search, dispatch.earliest_time, dispatch.latest_time
3no.
awesome, thanks a lot