When User ask to collect the data I need to call my saved search with defined host as
|savedsearch mysearch host="abc"
then I need to run this search once a day.
on the other end one script is collecting the data. When it reaches the specific count I need to stop sending data so I need to stop the scheduled search. This process needs to be automated. Is this possible in splunk View?
