Archive
Highlighted

Where do i find the non-scheduled searches under backend.

Path Finder

iam able to see saved search under UI but not in savedsearches.conf.

Tags (1)
0 Karma
Highlighted

Re: Where do i find the non-scheduled searches under backend.

SplunkTrust
SplunkTrust

@Inayath_khan

Use the below command to identify the path of your saved search configurations.

splunk cmd btool savedsearches list --debug

0 Karma
Highlighted

Re: Where do i find the non-scheduled searches under backend.

Path Finder

Thanks kamlesh but still i don't find my rule in any of savedsearches.conf.

0 Karma
Highlighted

Re: Where do i find the non-scheduled searches under backend.

Communicator

Hi @Inayathkhan are you talking about the scheduled search or just searched you saved as report/alert ?
Try searching in ```$SPLUNK
HOME/etc/users///local/savedsearches.conf```

0 Karma