Reporting

How to get a list of alerts reports searches and dashboards by user

Splunker899
New Member

Need a search query to find the list of alerts reports and dashboards and their user names and its status enabled or disabled

0 Karma

micahkemp
Champion

For savedsearches try this:

| rest /services/saved/searches | search "eai:acl.owner"="admin" | table eai:acl.owner title disabled

And for dashboards scheduled for PDF delivery:

| rest /services/scheduled/views | table eai:acl.owner action.email.to title disabled
0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...