Hi, I am currently using the search below to get the status of my saved searches.
index=_internal sourcetype=scheduler | eval dispatch_time=strftime(dispatch_time, "%B %d %H:%M:%S") | table savedsearch_name status dispatch_time run_time result_count | sort dispatch_time
However, I want to see the following status:
running;
not running
completed ("success" is OK)
Any suggestions? Thanks!
... View more