iam able to see saved search under UI but not in savedsearches.conf.
Hi @Inayath_khan are you talking about the scheduled search or just searched you saved as report/alert ?
Try searching in $SPLUNK_HOME/etc/users/<user Name>/<app>/local/savedsearches.conf
@Inayath_khan
Use the below command to identify the path of your saved search configurations.
splunk cmd btool savedsearches list --debug
Thanks kamlesh but still i don't find my rule in any of savedsearches.conf.