Getting Data In

Displaying Cron Schedule of all Scheduled Searches on Search Head Pool

Builder

Is there a way to display in table format all the cron schedules for all scheduled searches across all apps on a search head pool.

I was able to use the |rest /servicesNS/-/-/saved/searches command before enabling search head pooling. However it has not worked since enabling search head pooling.

Any ideas on how to display this data? I was able to use the data to audit scheduled searches and stagger them accordingly for best performance.

Thanks

Tags (3)
0 Karma
1 Solution

Builder

After upgrade to 5.x, the | rest command started working.

View solution in original post

0 Karma

Builder

After upgrade to 5.x, the | rest command started working.

View solution in original post

0 Karma

Builder

When I say the | rest command doesn't work anymore, I mean it returns results, but all cron schedules show blank results. Other fields still populate, like alert_type, author, dispatch.times, etc.

0 Karma