Scheduled Search V2

[fjerlov-cs]

New ./bin/humioctl scheduled-searches-v2 command to use the new scheduled searches endpoints and types.

./bin/humioctl scheduled-searches still works as intended but will not support creating scheduled searches running on ingesttimestamp.

If trying to install an old scheduled search yaml file, scheduled-searches-v2 will try and install it using the deprecated mutation.

Release notes for 1.180:
Scheduled searches can now also run on the @ingesttimestamp. A configurable Max wait time property on scheduled searches that runs on @ingesttimestamp is used to catch events that are delayed in the ingestion pipeline, or to wait for query warnings about missing data and errors. The @ingesttimestamp is the default timestamp set on all new scheduled searches.

With this change, the GraphQL mutations createScheduledSearch and updateScheduledSearch have been deprecated for removal in 1.231 and createScheduledSearchV2 and updateScheduledSearchV2 will replace them.

For more information about scheduled searches and their timestamps, see Ingest delay for scheduled searches. For information about the Max wait time property, see Max wait time.

[fjerlov-cs]

➜  cli git:(fjerlov/scheduled-search-v2) ✗ make && ./bin/humioctl scheduled-searches-v2 list humio
go build -o bin/humioctl ./cmd/humioctl
                 ID                |     NAME      |      DESCRIPTION       | SEARCH INTERVAL SECONDS | SEARCH INTERVAL OFFSET SECONDS | QUERY TIMESTAMP TYPE | MAX WAIT TIME | BACKFILL LIMIT | TIME ZONE |  SCHEDULE   | ACTION NAMES  |  LABELS   | ENABLED |      RUN AS USER ID      | QUERY OWNERSHIP TYPE
+----------------------------------+---------------+------------------------+-------------------------+--------------------------------+----------------------+---------------+----------------+-----------+-------------+---------------+-----------+---------+--------------------------+----------------------+
  TJw4Zm23ltFmjE07odOVgKMChMSBaIs7 | frederik-2    |                        |                      60 |                              0 | IngestTimestamp      |           600 |              0 | UTC+00:00 | * * * * *   | ActionRepo    |           | true    | SINGLE_ORGANIZATION_ID   | Organization
  9uUzoYUyJcwUHQnDdVb7P4JhKQ1h6Dg9 | frederik-3    |                        |                     120 |                              0 | EventTimestamp       |             0 |              0 | UTC+00:00 | 1/2 * * * * | ActionRepo    |           | true    | SINGLE_ORGANIZATION_ID   | Organization

[fjerlov-cs]

➜  cli git:(fjerlov/scheduled-search-v2) ✗ make && ./bin/humioctl scheduled-searches-v2 show humio frederik-2
go build -o bin/humioctl ./cmd/humioctl
                              ID | TJw4Zm23ltFmjE07odOVgKMChMSBaIs7  
                            Name | frederik-2                        
                     Description |                                   
                    Query String | tail(1)                           
         Search Interval Seconds | 60                                
  Search Interval Offset Seconds | 0                                 
            Query Timestamp Type | IngestTimestamp                   
           Max Wait Time Seconds | 600                               
                  Backfill Limit | 0                                 
                       Time Zone | UTC+00:00                         
                        Schedule | * * * * *                         
                         Enabled | true                              
                         Actions | ActionRepo                        
                  Run As User ID | SINGLE_ORGANIZATION_ID            
                          Labels |                                   
            Query Ownership Type | Organization