We have Search Templates ✔
We have Scheduled Searches ✔
I would like to combine these so that I can create multiple scheduled searches for a fixed set of potential parameter values. Currently we have to duplicate the query, one for each parameter value.
For example, if I'm searching for errors, I want to separately alert on my different environments. Given a templated query
// additional query stuff
This creates the environment parameter. I want to create two scheduled searches: one each for "test" and "prod".
This would allow me to update the query in one place and both scheduled searches would be affected.
Please sign in to leave a comment.