Hi According to https://docs.splunk.com/Documentation/SplunkCloud/latest/Service/SplunkCloudservice Data extracted as a result of search query, whether from the UI or REST API is limited to 5% of daily ingest for optimal performance.   And Scheduled search is not supported from a hybrid search head.   Let's say I want to fetch over the API (not from a hybrid search head, instead of from a third-party system) 5 min worth of data and I schedule that search to run every minute. I cannot see that that kind of set up would violate the agreement, but I want to make sure. - 5 min worth of data every min will never equal 5% of daily ingest... Anyone who has done a similar setup successfully? Many Thanks Jonas ... View more