index = _internal sourcetype=scheduler status=skipped
| stats count by app search_type reason savedsearch_name host
| sort - count | rename count as Count, app as App, search_type as "Search Type", reason as Reason, savedsearch_name as "Search Name", host as Host
0 comments
[0]
[0]
[0]
[0]