Hello,
I have on the same dashboard a few searches, all scheduled, out of which half are not actually saved (when opening the dashboard some of the panels appear immediately with a "... hours ago" while others's search is run only at that time).
They look similar in the configuration. For instance this one is scheduled & correctly saved
[Panel 1]
action.email.inline = 1
alert.digest_mode = True
alert.suppress = 0
alert.track = 0
auto_summarize.dispatch.earliest_time = -1d@h
cron_schedule = 25 06 * * *
dispatch.earliest_time = -3mon@mon
dispatch.latest_time = now
displayview = flashtimeline
enableSched = 1
request.ui_dispatch_view = flashtimeline
search = (the search query goes here)
vsid = hfm8s3w8
while that one is not
[Panel 2]
action.email.inline = 1
alert.digest_mode = True
alert.suppress = 0
alert.track = 1
auto_summarize.dispatch.earliest_time = -1d@h
cron_schedule = 50 6 * * *
dispatch.earliest_time = -90d@d
dispatch.latest_time = now
enableSched = 1
search = (search query goes here)
They were both created via the GUI, not directly coded into the savedsearches.conf file.
Thank you for any insights!
... View more