When saving or editing a report, Splunk returns an error stating that schedule_window is not supported.
In Settings > Roles, when reviewing the role in use, it is noticed that the capability "edit_search_schedule_window" is missing
As per this documentation, this capability allows the users to assign schedule windows to scheduled reports. It requires the schedule_search capability.
To resolve this issue, add the "edit_search_schedule_window" capability to the role experiencing issues with reports. Once the capability is added, the argument "schedule_window" will be recognized and the report will be saved successfully.
Define roles on the Splunk platform with capabilities
| Revision | Publish Date | Comments |
|---|---|---|
1.0 |
29-Sep-2026
|
Initial Release |