How can I get the list of all data model along with the last time it has been accessed in a tabular format

[sravani27]

Hi, I am trying to generate a report of all the data models that I have in my environment along with the last time it has been accessed to do a cleanup. Can anyone help with the search query?

[woodcock]

See the other answer by @adonio and add this:

See scheduled search runs:

index=_* sourcetype=scheduler 
| stats count by savedsearch_id

See SPL inside of saved searches:

| rest /servicesNS/-/-/saved/searches

[adonio]

start here:
| rest /services/datamodel/acceleration
or here:
| rest /services/datamodel/model

hope it helps

[woodcock]

What do you mean by accessed?

[sravani27]

I want to see the latest timestamp when the datamodel was used by a dashboard or alert or savedsearch

[BTB]

I don't think this is exactly it but it may lead you to the right path

| rest /services/datamodel/model |search eai:appName=search | table updated

The updated field shows when the model was last updated.