Skip to content

Update Schedule

To update the schedule modify the CrowdStrike Identities Lookup - Gen saved search. It is recommended to clone the default search before making changes (see Clone Saved Search).

The default saved search runs on the 29th minute of every hour to update and continually build the CrowdStrike identities. Most users will find that this schedule works for their environment.

To update the default schedule perform the following steps:

  1. Navigate to Settings > Searches, reports, and alerts.
  2. Set the "App" dropdown to SA-CrowdStrikeIdentities.
  3. Set the "Owner" dropdown to All.
  4. Click "Edit" under actions for the search CrowdStrike Identities Lookup - Gen or the name of the cloned search (see Clone Saved Search).
  5. Click "Edit Schedule" and update the schedule and necessary.
Last update: June 9, 2023