#
Update default saved search schedule
Optional
The default saved search runs on the 19th minute of every hour to update and continually build the CrowdStrike assets. To update the default schedule perform the following steps:
- (In Enterprise Security) Navigate to Configure > Content > Content Management.
- Type "SA-CrowdStrikeDevices" in the filter text box.
- Click "SA-CrowdstrikeDevices"
- Update the "Schedule" section as necessary
- If necessary, the retention settings can be modified by changing the "Retention" at the bottom.
- Navigate to Settings > Searches, reports, and alerts.
- Set the "App" dropdown to
SA-CrowdstrikeDevices
. - Set the "Owner" dropdown to
All
. - Click "Edit" under actions for the search
CrowdStrike Devices Lookup - Gen
. - Click "Edit Schedule" and update the schedule and necessary.