We are creating a scheduled search with "schedule type" as "basic" and "run every" as "15 minutes". After saving, the schedule type changes to "cron" for some reason.
I have tried changing the "run every" to "5 minutes" and "30 minutes", it works fine i.e. type is maintained.
there is a known splunk bug http://answers.splunk.com/answers/37636/saved-search-reverts-to-cron-scheduling-type-when-changing-i...
As long as the
cron value is
*/15 * * * * then the setting is correct so it doesn't matter.
as ops i said same and agree to it. But developers and users some time can be quite rigid on tool being perfect. Found that it is a known bug with a fix delivered in one of the later versions or to be delivered soon.