index=_internal sourcetype=scheduler scheduled_time=* savedsearch_name=* | stats count by scheduled_time, savedsearch_name | search count>1 | table savedsearch_name count | rename savedsearch_name as "Search Name" count as "Number of Times This Search Runs Each Time it is Called"
0 comments
[0]
[0]
[0]
[0]
index=_audit search=* NOT (search_id='scheduler* OR search_id='Summary*) | timechart span=1d count by user usenull=f
0 comments
[0]
[0]
[0]
[0]