UnsavedScheduledSearch is a datatype for an unsaved scheduled search. It's used by the generateScheduledSearchFromTemplate() and generateScheduledSearchFromPackageTemplate() query fields.

Table: UnsavedScheduledSearch

ParameterTypeRequiredDefaultStabilityAvailabilityDescription
Some input parameters may be required, as indicated in the Required column. For return values, this indicates that you are assured a value if the field is requested for the results. 
Table last updated: Oct 14, 2026 
actionsActionyes Long-Term A list of unique identifiers for actions to fire on query result. See Action.
backfillLimitV2Int  Long-Term User-defined limit, which caps the number of missed searches to backfill, e.g. in the event of a shutdown. Only present when 'queryTimestampType' is EventTimestamp. Stability: Long-term
descriptionString  Long-Term A description of the scheduled search.
enabledBooleanyes Long-Term Whether the scheduled search is enabled.
labelsStringyes Long-Term Labels attached to the scheduled search.
maxWaitTimeSecondsLong  Long-Term Maximum number of seconds to wait for ingest delay. Only present when 'queryTimestampType' is IngestTimestamp. Stability: Long-term
nameStringyes Long-Term The name of the scheduled search.
queryStringStringyes Long-Term The LogScale query to execute.
queryTimestampTypeQueryTimestampTypeyes Long-Term The timestamp type to use for the query. Running on @ingesttimestamp is only available with feature flag ScheduledSearchIngestTimestamp. See QueryTimestampType.
scheduleStringyes Long-Term The cron pattern describing the schedule on which to execute the query.
searchIntervalOffsetSecondsLong  Long-Term The search interval offset in seconds when queryTimestampType is EventTimestamp.
searchIntervalSecondsLongyes Long-Term The search interval in seconds.
timeZoneStringyes Long-Term The time zone of the schedule. Currently, this field supports only UTC offsets (e.g., 'UTC', 'UTC-01' or 'UTC+12:45').
triggerOnEmptyResultBooleanyes Long-Term Whether the scheduled search should be triggered when there are no events.