Deployment Architecture

How to resolve error "Replication-related issue: Cannot move asset lacking a pre-existing asset ID"?

shellsam
Explorer
 In handler 'fvtags': Type = tags, Context = (user: username1, app: app_name, root: /dir1/opt/splunk/etc), Acting as = username1: Replication-related issue: Cannot move asset lacking a pre-existing asset ID: /username1/app_name/tags/host=hostname

jt_rocks
Engager

An easy workaround is to open the knowledge object for edit in the GUI and click save. The asset id will get added and then you can move it around.

jt_rocks
Engager

Just click on it as if you were going to change the tag, but instead of changing it just click save.

0 Karma

jackiewkc
Path Finder

Ah, thanks !! I was in the "All unique tag objects" page which doesn't allow me to edit but I can do so in the "List by field value pair" page.

This is probably not related to this topic but is it possible to change the default permission when a user creates a new tag? At the moment, it is set to Private, I would like to change it to App.

Thanks again

0 Karma

jackiewkc
Path Finder

Hi,

can you please advise how to "open the knowledge object for edit in the GUI and click save"?

Thanks.

J

0 Karma

ppablo
Retired

Hi @shellsam

Can you provide more details for your question please? What were you doing when you got this message? What kind of Splunk deployment? Include as much information as possible for people to help you here.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...