In Splunk Dashboard examples, how do I disable a report that is embedded?

[manirao]

I am trying to disable an alert. When I try to disable, I'm getting the following error/warn message: "Cannot edit report that is embedded"

Please help me in this
Thanks in advance.

[burwell]

Embedded reports are a real pain to deal with.

The trick is that you need to be on the Reports page.

The settings -> searches, reports and alerts page does NOT allow you to embed.

1) So go to http:/yourserver/en-US/app/search/reports
2) find the report
3) Pull down Edit -> Edit Description, Edit Permissions... choose Disabled Embedding
4) You will be asked to confirm if you want to stop embedding

I usually edit my savedsearches and reports with the standard Settings -> searches, reports and Alerts. When you go that way you cannot do the embedding.

Here's the doc on embedded reports:

https://docs.splunk.com/Documentation/Splunk/7.2.0/Report/Embedscheduledreports#Disable_report_embed...

[manirao]

Hi Burwell,
Thanks for your response.

I am trying to delete the alert. When I hit disable button, getting this Error (Cannot edit report that is Embedded)

Please help me on this.
Thanks in advance.

[burwell]

Hi.. so

1. disable embedding first
2. Then disable or delete

Follow the steps for finding the menu to disable embedding first.

It's really clunky and non intuitive.