With cron being one of the 2 types to schedule a seavedsearch, is Splunk actually using the system cron or is only allowing one to use cron formatting to schedule a savedsearch, and Splunk's internal scheduler is just translating it?
Splunk uses its own scheduler, not the system's cron.