Dashboard for all alerts in splunk

[Sailesh6891]

Can someone please help me with dashboard search query that will look for all alerts configured in splunk and list only those alerts having index=* 

[marnall]

Try the API:

| rest "/servicesNS/-/-/saved/searches" splunk_server=*
| regex search="index=\*"
| table title search disabled author eai:acl.app

[isoutamo]

You should add \s* in both side of = to found also “index =*” etc definition. Also there could be a macro or eventtypes where this definition is. Even role’s default index or search filters could contains this definition. As you see it’s not as easy than look “index=*” from saved searches or even from _audit.
There are lot of similar questions and answers in community where you could see more information about this subject.