I see that when i reassigning ownership the schedule wont kick in (next_scheduled_time just reads none), for example until i open the search and manually hit save it seems like none of them will run on the original set time.
anyone ever run into this before? is there a rest call i can do to change the ownership based off the old owner?
Here you go for bulk modification of ownership of KO https://github.com/harsmarvania57/splunk-ko-change . Script given in Github repo works with python2 only, I am in process to convert that script for python3 and will be going to do some enhancement.