I'm trying to find all the saved alerts that have a certain action. I've found this search:
|rest/servicesNS/-/-/saved/searches | search alert.track=1 actions="*action*" | fields title description search disabled triggered_alert_count actions
However, this only returns some of the alerts with that action, and I'm not sure why. It looks like any alert that has other actions that are alphabetically before "action" are in the results, but any alert that has other actions alphabetically after "action" are not returned.
Any assistance would be much appreciated.
