Alerting

Knowledge Object

whitecat001
Explorer

Hello,

There was a user name that was changed and want to transfer ownership of splunk knowledge Object (Alerts) to her new account name . Pls how will i go about effecting this change 

Tags (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

You have two identical questions! 
See the answer from that another one.

https://community.splunk.com/t5/Alerting/Knowledge-Object/m-p/680852#M15802

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @whitecat001,

you have to go in [Settings > All Configuration ]

then you have to

  • select the app where the knowledge object are,
  • select the ones to reassign,
  • click on the Reassign Knowldge Objects button (top right).

Ciao.

Giuseppe

0 Karma

whitecat001
Explorer

Thanks for the quick response but i will like to achieve this through  the cli and also the user changed her name and will want the new name to be applied to the knowledge object

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @whitecat001,

You have to go in the $SPLUNK_HOME/etc/apps/yur_app/metadata/local.meta and manually update the owners of the files.

I'd use the GUI!

Ciao.

Giuseppe

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...