I am running Splunk 4.2.3 and have a number of saved searches set up to run on varying schedules. All of these are set up using "basic" scheduling type. If I edit one of these via Manager - Searches & Reports and change the "Run every" setting from whatever time it is to 15 minutes and save the search, then go back into the saved search via Manager, the scheduling type has changed from basic to cron.
I have tested this in multiple browsers, as well as verifying this doesn't happen if changing the "Run every" setting to something OTHER than 15 minutes (1 minute, 30 minutes, hourly, etc...).
Any thoughts?
Thanks.
... View more