UpdateScheduledSearchV3 is an input datatype for updating a scheduled search. It's used by the updateScheduledSearchV3() mutation field.

Table: UpdateScheduledSearchV3

ParameterTypeRequiredDefaultStabilityAvailabilityDescription
Some input parameters may be required, as indicated in the Required column. For return values, this indicates that you are assured a value if the field is requested for the results. 
Table last updated: Oct 14, 2026 
actionIdsOrNamesStringyes Long-Term List of ids or names for actions to fire on query result. Actions in packages can be referred to as packagescope/packagename:actionname.
backfillLimitInt  Long-Term User-defined limit, which caps the number of missed searches to backfill, such as in the event of a shutdown. Only allowed when queryTimestampType is EventTimestamp where it is mandatory.
descriptionString  Long-Term Description of the scheduled search.
enabledBooleanyes Long-Term Whether the scheduled search is enabled.
idStringyes Long-Term The unique identifier of the scheduled search.
labelsStringyes Long-Term Labels attached to the scheduled search.
maxWaitTimeSecondsLong  Long-Term Maximum number of seconds to wait for ingest delay and query warnings. Only allowed when queryTimestamp is IngestTimestamp where it is mandatory.
nameStringyes Long-Term The name of the scheduled search.
queryOwnershipTypeQueryOwnershipTypeyes Long-Term Ownership of the query run by this scheduled search. If value is User, ownership will be based on the runAsUserId field. See QueryOwnershipType.
queryStringStringyes Long-Term LogScale query to execute.
queryTimestampTypeQueryTimestampTypeyes Long-Term Timestamp type to use for the query. See QueryTimestampType.
runAsUserIdString  Long-Term The scheduled search will run with the permissions of the user corresponding to this unique identifier if queryOwnershipType is set to User. If queryOwnershipType is set to Organization, while runAsUserId is set, this will result in an error. If not specified, the scheduled search will run with the permissions of the calling user. It requires the ChangeTriggersToRunAsOtherUsers permission to set this field to a different user identifier than that of the calling user.
scheduleStringyes Long-Term Cron pattern describing the schedule on which to execute the query.
searchIntervalOffsetSecondsLong  Long-Term Offset of the search interval in seconds. Only allowed when queryTimestampType is EventTimestamp where it is mandatory.
searchIntervalSecondsLongyes Long-Term The search interval in seconds.
timeZoneStringyes Long-Term Time zone of the schedule. Currently, this field only supports UTC offsets (e.g., 'UTC', 'UTC-01' or 'UTC+12:45').
triggerOnEmptyResultBooleanyes Long-Term Whether the scheduled search should trigger when it finds en empty result (i.e., no events).
viewNameStringyes Long-Term The name of the view of the scheduled search.