The Orphaned Scheduled Search that runs on 6.4 is not working. I have looked at it down to the point that I know that this search doesn't work:
| rest splunk_server=local /services/saved/searches add_orphan_field=1
while this one does work
| rest splunk_server=local /services/saved/searches
The latter one times out without returning any results.
Can anyone tell me why, or what I can do to make this work?
↧
