Is there a way to display in table format all the cron schedules for all scheduled searches across all apps on a search head pool.
I was able to use the |rest /servicesNS/-/-/saved/searches
command before enabling search head pooling. However it has not worked since enabling search head pooling.
Any ideas on how to display this data? I was able to use the data to audit scheduled searches and stagger them accordingly for best performance.
Thanks
After upgrade to 5.x, the | rest command started working.
When I say the | rest command doesn't work anymore, I mean it returns results, but all cron schedules show blank results. Other fields still populate, like alert_type, author, dispatch.times, etc.