diff --git a/docs/alerts/scheduled-searches/edit-cancel.md b/docs/alerts/scheduled-searches/edit-cancel.md index 684840c743..ede6414bfd 100644 --- a/docs/alerts/scheduled-searches/edit-cancel.md +++ b/docs/alerts/scheduled-searches/edit-cancel.md @@ -24,10 +24,14 @@ If the user who "owns" a Scheduled Search is removed from your org, the Schedule 1. Go to your **Library** and find the scheduled search you want to cancel. For information about finding an item in the Library, see [Search the Library](/docs/get-started/library#search-the-library).  1. Click the more options menu to the right of the scheduled search and select **Edit**.  1. In the **Edit Search** dialog, click **Edit this search's schedule**. -1. Make the changes, and then click **Update**. If Sumo presents a "Cannot Edit Scheduled Search" message, see the following section. +1. Make the changes, and then click **Update**. +:::info +Modifying the query will apply your data access level to the scheduled search. Your data access level might be broader than users who can view the results of this search through the configured notification. They might see data that their roles don't allow them to view. +::: :::note It may take up to 20 minutes for changes in alert conditions to take effect. If you cannot wait 20 minutes, one option is to create a new scheduled search using the *Save As* query option in the search UI. ::: +If Sumo Logic presents a "Cannot Edit Scheduled Search" message, refer to the section below. ### Edit permissions