topic Knowledge Object in Alerting

Knowledge Object

whitecat001 — Fri, 15 Mar 2024 14:43:03 GMT

Hello,

There was a user name that was changed and want to transfer ownership of splunk knowledge Object (Alerts) to her new account name . Pls how will i go about effecting this change

Re: Knowledge Object

gcusello — Fri, 15 Mar 2024 14:58:55 GMT

Hi @whitecat001,

you have to go in [Settings > All Configuration ]

then you have to

select the app where the knowledge object are,
select the ones to reassign,
click on the Reassign Knowldge Objects button (top right).

Ciao.

Giuseppe

Re: Knowledge Object

whitecat001 — Fri, 15 Mar 2024 15:15:27 GMT

Thanks for the quick response but i will like to achieve this through the cli and also the user changed her name and will want the new name to be applied to the knowledge object

Re: Knowledge Object

gcusello — Fri, 15 Mar 2024 17:01:10 GMT

Hi @whitecat001,

You have to go in the $SPLUNK_HOME/etc/apps/yur_app/metadata/local.meta and manually update the owners of the files.

I'd use the GUI!

Ciao.

Giuseppe

Re: Knowledge Object

isoutamo — Fri, 15 Mar 2024 20:53:02 GMT

You have two identical questions!
See the answer from that another one.

https://community.splunk.com/t5/Alerting/Knowledge-Object/m-p/680852#M15802