UpdateScheduledSearch is an input datatype for updating a scheduled search. It's used by the updateScheduledSearch() mutation field, which is deprecated and replaced by updateScheduledSearchV3().

Table: UpdateScheduledSearch

ParameterTypeRequiredDefaultStabilityDescription
Some input parameters may be required, as indicated in the Required column. For return values, this indicates that you are assured a value if the field is requested for the results.
Table last updated: Jun 26, 2026
backfillLimitintegeryes DeprecatedUser-defined limit, which caps the number of missed searches to backfill, e.g. in the event of a shutdown.
descriptionstring  DeprecatedDescription of the scheduled search.
enabledbooleanyes DeprecatedFlag indicating whether the scheduled search is enabled.
idstringyes DeprecatedThe unique identifier of the scheduled search.
labels[string]yes DeprecatedLabels attached to the scheduled search.
namestringyes DeprecatedThe name of the scheduled search.
queryOwnershipTypeQueryOwnershipType UserDeprecatedOwnership of the query run by this scheduled search. If value is User, ownership will be based on the runAsUserId field. See QueryOwnershipType.
queryStringstringyes DeprecatedThe LogScale query to execute.
runAsUserIdstringyes DeprecatedThe scheduled search or alert will run as the user with this id. If not specified, the calling user will be used. It requires a special permission to set the run as user to a different user than the calling user.
schedulestringyes DeprecatedThe cron pattern describing the schedule on which to execute the query.
timeZonestringyes DeprecatedTime zone of the schedule. Currently this field only supports UTC offsets like 'UTC', 'UTC-01' or 'UTC+12:45'.
viewNamestringyes DeprecatedName of the view of the scheduled search.