Alerting

Knowledge Object

whitecat001
Explorer

Hello,

There was a user name that was changed and want to transfer ownership of splunk knowledge Object (Alerts) to her new account name . Pls how will i go about effecting this change 

Tags (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

You have two identical questions! 
See the answer from that another one.

https://community.splunk.com/t5/Alerting/Knowledge-Object/m-p/680852#M15802

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @whitecat001,

you have to go in [Settings > All Configuration ]

then you have to

  • select the app where the knowledge object are,
  • select the ones to reassign,
  • click on the Reassign Knowldge Objects button (top right).

Ciao.

Giuseppe

0 Karma

whitecat001
Explorer

Thanks for the quick response but i will like to achieve this through  the cli and also the user changed her name and will want the new name to be applied to the knowledge object

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @whitecat001,

You have to go in the $SPLUNK_HOME/etc/apps/yur_app/metadata/local.meta and manually update the owners of the files.

I'd use the GUI!

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...