Reporting

How to clone reports from Splunk Ent to ES ( Ent. Security)? Thank u in advance

SamHTexas
Builder

How to clone reports from Splunk Ent to ES ( Ent. Security)?

Labels (1)
Tags (1)
0 Karma

rupkumar4sec
Path Finder

If you have ES on the same search head where the reports are located, You can just use Edit>Move from UI. 

If you they are on different search head or you have large number of reports that you want to migrate, You can Copy their definition from savedsearches.conf(From where it is defined now) and paste it in local/savedsearches.conf in ES app. 

0 Karma

SamHTexas
Builder

Thank u for your message. I just found it. Splunk Ent. & ES are not on the same SH. How do I clone it now please. Thank u in advance?

Tags (1)
0 Karma

gjanders
SplunkTrust
SplunkTrust

The transfer knowledge object scripts might work for this https://github.com/gjanders/Splunk

0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...