In which context are savedsearches.conf and macros.conf typically used?

Savedsearches.conf and macros.conf are typically used within the context of an App or User. These configuration files allow users to define saved searches and macros that are specific to individual apps or users.

When you create a saved search in Splunk, for instance, you may want that saved search to be associated with a particular application to ensure that it's relevant within that context. Similarly, macros, which are essentially reusable snippets of search string, can be defined within an app to ensure that they can be accessed and used by the searches associated with that app.

Using these configurations at the app/user level allows for better organization and management of searches and macros, making it easier to maintain and share customized configurations among users working on similar projects or within the same application context. This promotes effective collaboration and enhances the user experience by tailoring functionalities to specific needs within designated applications.