Dashboards & Visualizations

How to know where the macro is used ?

zacksoft_wf
Contributor

we have a lot of contents/knoweldge objects and are trying to weed out the ones that are unused. We are using Enterprise Security and other apps. 
I have identified a few `Macros`  that I want to remove/delete, but before that I want to make sure that they are not used in any Splunk Saved search/correlation search/loop up generating search Or within any SPL for that matter.
Is there a way to find it ?

Labels (1)
Tags (1)
0 Karma
1 Solution

kamlesh_vaghela
SplunkTrust
SplunkTrust

@zacksoft_wf 

You can use these also for identifying use of macros.

| rest /services/saved/searches | table search | search search="*<<ENTER_MACRO_NAME>>*"
| rest/servicesNS/-/-/data/ui/views | table "eai:data" | search "eai:data"="*<<ENTER_MACRO_NAME>>*"

 

KV

View solution in original post

0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

@zacksoft_wf 

You can use these also for identifying use of macros.

| rest /services/saved/searches | table search | search search="*<<ENTER_MACRO_NAME>>*"
| rest/servicesNS/-/-/data/ui/views | table "eai:data" | search "eai:data"="*<<ENTER_MACRO_NAME>>*"

 

KV

0 Karma

codebuilder
Influencer

You can use the REST endpoint.

| rest/servicesNS/-/-/data/lookup-table-files
----
An upvote would be appreciated and Accept Solution if it helps!
0 Karma
Get Updates on the Splunk Community!

Continuing Innovation & New Integrations Unlock Full Stack Observability For Your ...

You’ve probably heard the latest about AppDynamics joining the Splunk Observability portfolio, deepening our ...

Monitoring Amazon Elastic Kubernetes Service (EKS)

As we’ve seen, integrating Kubernetes environments with Splunk Observability Cloud is a quick and easy way to ...

Cloud Platform & Enterprise: Classic Dashboard Export Feature Deprecation

As of Splunk Cloud Platform 9.3.2408 and Splunk Enterprise 9.4, classic dashboard export features are now ...