Knowledge Management

How do I find everything owned by a user?

jwhughes58
Contributor

We had a user leave and before he did he asked that I change the ownership of all his reports to another employee.  I did that.  Today I found out that he owns a lookup.  When I look in knowledge objects orphans, it wasn't in there.  From what I've found online, lookups are completely different.  Is there anyway in Splunk to find everything a user owns?  I would rather be proactive and find things the the user didn't mention, rather than wait for notification that something isn't working.

TIA,

Joe

Labels (2)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

The dashboard at Settings->All configurations should show everything a given user owns.  Or you can try this query

| rest /servicesNS/-/-/directory splunk_server=local
| search eai:acl.owner="foo"
| rename eai:* as *, acl.* as *
| sort owner app type
| table owner sharing app title type location
---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

The dashboard at Settings->All configurations should show everything a given user owns.  Or you can try this query

| rest /servicesNS/-/-/directory splunk_server=local
| search eai:acl.owner="foo"
| rename eai:* as *, acl.* as *
| sort owner app type
| table owner sharing app title type location
---
If this reply helps you, Karma would be appreciated.

jwhughes58
Contributor

Thanks @richgalloway for the solution.  That does exactly what I need it to do.

Get Updates on the Splunk Community!

Optimize Cloud Monitoring

  TECH TALKS Optimize Cloud Monitoring Tuesday, August 13, 2024  |  11:00AM–12:00PM PST   Register to ...

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...