I use loadjob command in my dashboard
they are scheduled every hour
if i want to have date displayed im forced to go in my dashboard before the schedule occurs, i have to wait for the schedule and after to refresh the dashboard in order to have data
at the beginning i have the message "Cannot find artifacts"
| loadjob savedsearch="admin:FO_Workstations_Monitoring:FO_EventServiceLog_Serv5"
what I have to do please??
You can try the search mentioned below:
|loadjob [rest /services/saved/searches/mysearchname/history splunk_server=local |where isDone==1 |eventstats max(ttl) as maxttl |where ttl==maxttl |return $title]
Also PFB link on splunk answers, they have explained what all are the possibilities of these error you are facing. This might help you.