Hi All,
How can I search whether a particular saved search is being used in any dashboard or alerts or reports in Splunk.
You could set an alert around a search similar to this
index=_audit sourcetype=audittrail (savedsearch_name="MySavedReport" OR savedsearch_name="YourSavedReport")
like if i want to see the paticular saved search is used in which dashbords i used below query i got the results:
|rest splunk_server="local" "/servicesNS/-/-/data/ui/views"
|search "eai:data" ="My saved search name"
now i need the query for the same to see for alerts or reports.