How to generate a search to identify scheduled jobs by user?

[vadlamudi]

hi,

Can anyone please help me with a search to to identify scheduled jobs for abc and xyz application and the user owning that job? i know i need to use index=_internal and source=scheduler.log. But i am not getting the exact requirement that i need.

[vasanthmss]

Check this,

https://answers.splunk.com/answers/494555/is-there-any-way-to-list-all-the-saved-searches-in-1.html#...

check the below query

| rest /services/saved/searches | where is_scheduled=1 

for historical scheduled searches use the below query,

index=_internal sourcetype=scheduler  | table _time user savedsearch_name status scheduled_time run_time result_count *