Refine your search:
Is there a command via splunk.exe or some other /bin tool that would output all scheduled searches in a particular instance of Splunk?
asked 20 Jul '10, 12:52
muebel ♦ 1.0k●1●1●17 accept rate: 40%
./splunk list saved-search
lists the current user's saved searches. I don't think there is a command to show all saved searches.
answered 20 Jul '10, 13:02
ftk ♦ 6.2k●4●19 accept rate: 37%
Excellent, seems to work well enough.
Log In to enable email subscriptions
Answers
Answers + Comments
Markdown Basics
learn more about Markdown
Tags:
search ×1,089 report ×130 scheduled ×62 command-line ×11
Asked: 20 Jul '10, 12:52
Seen: 558 times
Last updated: 20 Jul '10, 13:02
One-liner to disable all scheduled searches?
one liner to get list of scheduled searches associated with users
Scheduled time has changed to None for an existing scheduled save search
how does search head pooling work with scheduled searches?
scheduled searches not showing as scheduled
Multiple search heads, config replication and dealing with scheduled searches (without pooling)
App installation, scheduled searches, summary index and search heads
Timing and how Splunk handles Scheduled Searches
Scheduled Searches and Multiple Searchheads