Hi,
How do we list out all of the saved scheduled jobs on a Splunk setup by user, by day, by search, by tittle of the saved search?
Also, I wanted to plot in a days view of scheduled jobs -- ie.. 0-23 HRS scale with 1HR, all the jobs for a given user. Basically, I wanted to know how many are scheduled at the same time in a given day and by users.
I've the following REST call:
| rest /services/saved/searches | stats values(search) as QueryName, values(title) as JobName, values(cron_schedule) as ScheduledAt by eai:acl.owner, title, cron_schedule
But, not sure how to transform cron-expression into a time to plot.
thanks..