Reporting

How to change the ownership of scheduled searches in Splunk Cloud?

Explorer

Hello,

Can someone tell me how I can change the ownership of scheduled searches in Splunk Cloud?

Thanks,

JG

0 Karma

Splunk Employee
Splunk Employee

I don't believe we have a way in the UI to do this, so it most likely will be a request to Splunk Support to do so on your behalf. The process is similar to resolving orphaned searches if a user is removed:

http://docs.splunk.com/Documentation/Splunk/6.5.0/Knowledge/Resolveorphanedsearches

so changing the local metadata and a refresh of splunkd would take care of it. However, changing the local metadata is a CLI thing, which one does not have access to in Splunk Cloud.

NOTE: Resolving orphaned objects is something that will be included in the UI in a near future release.

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!