Ad slot: top

SPL

Identify all saved searches that use a specific keyword

Description

Submitted by Azeemering

Description:

This Splunk search searches all your saved searches for a specific keyword. Handy if you need to identify all searches that use a specific index, sourcetype or other keyword.

 

Query:

0 0
|rest  /servicesNS/-/-/saved/searches add_orphan_field=yes count=0
| rename eai:acl.app AS app
| rename eai:acl.app AS app
| search qualifiedSearch=*keyword*
| table title, cron_schedule, author, app, eai:acl.owner, orphan, disabled, is_scheduled, qualifiedSearch id

Comments

0 total

Be the first to comment on this SPL.

Leave a comment

You must log in to post a comment.

Ad slot: bottom