Reporting

Why can't I update the Distributed Management Console with error "Saved search "DMC Asset - Build Full" cannot be executed because it is disabled."?

OldManEd
Builder

I've been having issues with updating the Splunk Distributed Management Console. Looking at the splunkd.log file I saw the following entry;

ERROR SavedSearchAdminHandler - Saved search "DMC Asset - Build Full" cannot be executed because it is disabled.

So how do I enable this so I can update DMC and address my current issue?

0 Karma
1 Solution

OldManEd
Builder

Never mind, I found it. In "Under Searches, reports, and alerts", under App Context>Distributed Management Console, the "DMC Asset - Build Full" search was sitting. I simply enabled it and everything worked fine.

View solution in original post

0 Karma

OldManEd
Builder

Never mind, I found it. In "Under Searches, reports, and alerts", under App Context>Distributed Management Console, the "DMC Asset - Build Full" search was sitting. I simply enabled it and everything worked fine.

0 Karma

hexx
Splunk Employee
Splunk Employee

Just curious but why are you looking to edit this search? Also, was the search disabled manually?

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

A Four-Part Event Series: Full Stack Observability For the AI Era

As AI reshapes applications, infrastructure, and the way teams operate, the traditional boundaries of ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...