i want to get list of scheduled saved searches with the name and the searches itself. can anybody help?
| rest /servicesNS/-/-/saved/searches splunk_server=local
Getting all of your stored searches from the Search Head will be much easier with this.
Start here
| rest "/servicesNS/-/-/saved/searches" splunk_server=local search="is_scheduled=1" | rename eai:* as * acl.app as app | fields title app author type search
that will give you the data, then do what you need to do with it
