saved searches

[Siddharthnegi]

How to get all saved searches with their names and their respective search

[gcusello]

Hi @Siddharthnegi ,

there are two solutions:

splunk cmd btool --debug savedsearches list | egrep "\["

or

| rest /servicesNS/-/-/saved/searches  | table title,   cron_schedule next_scheduled_time eai:acl.owner  actions eai:acl.app action.email action.email.to dispatch.earliest_time dispatch.latest_time search *

I prefer the second.

Ciao.

Giuseppe