Hi,
I wrote the following query to identify searches running in verbose mode but it seems to be inducing reports that have been deleted. Is there a field I can use to exclude them? I have had a look but nothing obvious comes to me.
| rest /servicesNS/-/-/saved/searches
| search alert_type = "always" NOT title="instrumentation.*"
| table eai:acl.owner title description *mode* is_scheduled
| search display.page.search.mode=verbose
Thanks
