Installation

Why am I unable to delete default reports from custom app in Splunk Cloud?

daveywfii
Explorer

I created a custom app and used the built in template that adds a bunch of generic reports and dashboards. I am unable to delete any of the saved reports that came default with the template. I am getting this error: 

 

 

 

This saved search failed to handle removal request due to Object id=Histogram of delay in seconds cannot be deleted in config=savedsearches.

 

 

 

 

Any ideas how I can delete these? I am getting duplicate errors on our ES SH because of using this template multiple times. I have tried disabling the reports, but it still doesn't work. I have tried to delete from the Settings > "Searches, Reports, and Alerts" as well as within the app and neither worked.  

Labels (2)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @daveywfii ,

you can use the solution from @richgalloway or open a ticket to Splunk Support for removal.

Ciao.

Giuseppe

0 Karma

richgalloway
SplunkTrust
SplunkTrust

If the object is in the default directory of the app then it cannot be deleted via the UI.  It has to be removed off-line and the app re-packaged and re-installed.  If you don't have an off-line copy of the app, ask Support for one.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Take Action Automatically on Splunk Alerts with Red Hat Ansible Automation Platform

 Are you ready to revolutionize your IT operations? As digital transformation accelerates, the demand for ...

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...

Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...

Financial services organizations face an impossible equation: maintain 99.9% uptime for mission-critical ...