Archive

Is there a way to recover a dataset?

Motivator

Someone accidentally deleted a dataset - a lookup from the app's Datasets section. Is there a way to recover it? It's on a standalone search head.

Tags (2)
0 Karma
1 Solution

SplunkTrust
SplunkTrust

if you have a backup or splunk diag, go to your last backup or diag.
if not, well, its gone

View solution in original post

SplunkTrust
SplunkTrust

if you have a backup or splunk diag, go to your last backup or diag.
if not, well, its gone

View solution in original post

Motivator

And we can trace the deletion via index=_audit <id> action=deleted.

0 Karma