Problem 1: I'm trying to disable a correlation search, but am unable to do so. When I click on disable, inside the content management, it says "Searches have been sucessfully disabled", but the one particular search isn't getting disabled.
The problem is that the app TA-Domaintools, using which the search was created, is no longer configured properly. By the time I took over the administration of our environment, we have seemed to have lost the API key and the credentials for it. It asks for reconfiguration, but we can't do that without the credentials.
Problem 2: The app is scheduled to run on a cron schedule of every 5 minutes. Since I was unable to disable the search, I tried to schedule to run on every December 31st, at 12 AM. The cron i put in there is 12/31*/12*. The syntax is wrong, so I tried to save the original one, /5***
But then, it started throwing an error while saving: ' there was an error saving the correlation search. invalid alert_comparator="" '.
Can anyone help me in changing the cron schedule to December 31st of every year/disabling the search itself? Thanks in advance for your help.