to show enabled or disabled number of saved searches w.r.t. hosts irrespective of time range in Splunk?
I want do this by using index not rest
I'm not quite sure what you mean when you state "...using index...". Data about saved searches is not kept in an index. The search I posted above will give you information about saved searches though. I added a screenshot to the original answer to see an example.
How do i need to get a report created on search head for the network/modular inputs which are created on a Heavy Forwarder using rest Api command.
How do i need to get a report created on search head for the network/modular inputs which are created on a Heavy Forwarder using rest Api command.