When I run splunk cmd btool savedsearches list --debug I do not see any saved searches for my application however there is a savedsearches.conf file in local with 11 saved searches that are configured similar to another application which does show when I run the btool. What would cause these savedsearches for this application not show up when I run btool? Thanks for your help.
Where is the file? It must be in $SPLUNK_HOME/etc/*/default/savedsearches.conf
or $SPLUNK_HOME/etc/*/local/savedsearches.conf
.
Check the file permissions.