Improved TestService.CanSearchOneshot

Signed-off-by: David Noble <dnoble@splunk.com>