How can I get the SVC Usage for Saved Searches and Ad-hoc searches? These logs don't have it.
index="_internal" data.searchType="scheduled"
index="_audit" sourcetype="audittrail" action="search" info="completed"
Have you taken a look in your Monitoring Console within the Splunk UI? E.g.
$Your Splunk Instance$/app/splunk_monitoring_console/scheduler_activity_instance
You can also open up the searches for those various panels to see what data they are looking at (a lot of them are hitting REST endpoints)
(on edit: I am now realizing that you might be referring to specific SVC usage from a cloud perspective and not just "what are my scheduled searches doing? But if this sort of metric doesn't exist for the cloud admin dashboards, maybe they should...)