Reporting

Why can't I update the Distributed Management Console with error "Saved search "DMC Asset - Build Full" cannot be executed because it is disabled."?

OldManEd
Builder

I've been having issues with updating the Splunk Distributed Management Console. Looking at the splunkd.log file I saw the following entry;

ERROR SavedSearchAdminHandler - Saved search "DMC Asset - Build Full" cannot be executed because it is disabled.

So how do I enable this so I can update DMC and address my current issue?

0 Karma
1 Solution

OldManEd
Builder

Never mind, I found it. In "Under Searches, reports, and alerts", under App Context>Distributed Management Console, the "DMC Asset - Build Full" search was sitting. I simply enabled it and everything worked fine.

View solution in original post

0 Karma

OldManEd
Builder

Never mind, I found it. In "Under Searches, reports, and alerts", under App Context>Distributed Management Console, the "DMC Asset - Build Full" search was sitting. I simply enabled it and everything worked fine.

0 Karma

hexx
Splunk Employee
Splunk Employee

Just curious but why are you looking to edit this search? Also, was the search disabled manually?

Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...