Reporting

Why can't I update the Distributed Management Console with error "Saved search "DMC Asset - Build Full" cannot be executed because it is disabled."?

OldManEd
Builder

I've been having issues with updating the Splunk Distributed Management Console. Looking at the splunkd.log file I saw the following entry;

ERROR SavedSearchAdminHandler - Saved search "DMC Asset - Build Full" cannot be executed because it is disabled.

So how do I enable this so I can update DMC and address my current issue?

0 Karma
1 Solution

OldManEd
Builder

Never mind, I found it. In "Under Searches, reports, and alerts", under App Context>Distributed Management Console, the "DMC Asset - Build Full" search was sitting. I simply enabled it and everything worked fine.

View solution in original post

0 Karma

OldManEd
Builder

Never mind, I found it. In "Under Searches, reports, and alerts", under App Context>Distributed Management Console, the "DMC Asset - Build Full" search was sitting. I simply enabled it and everything worked fine.

0 Karma

hexx
Splunk Employee
Splunk Employee

Just curious but why are you looking to edit this search? Also, was the search disabled manually?

Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...