Using this SPL:
| rest servicesNS/-/-/search/tags/suppress splunk_server=local
I get a list of all of the searches that result in tag=suppress. It seems that the outputted field labeled "updated" only contains when the original tag was created and does not reflect when each search was updated. Is there a way to see when each search was updated for a particular tag?
