Reporting

Why can't I update the Distributed Management Console with error "Saved search "DMC Asset - Build Full" cannot be executed because it is disabled."?

OldManEd
Builder

I've been having issues with updating the Splunk Distributed Management Console. Looking at the splunkd.log file I saw the following entry;

ERROR SavedSearchAdminHandler - Saved search "DMC Asset - Build Full" cannot be executed because it is disabled.

So how do I enable this so I can update DMC and address my current issue?

0 Karma
1 Solution

OldManEd
Builder

Never mind, I found it. In "Under Searches, reports, and alerts", under App Context>Distributed Management Console, the "DMC Asset - Build Full" search was sitting. I simply enabled it and everything worked fine.

View solution in original post

0 Karma

OldManEd
Builder

Never mind, I found it. In "Under Searches, reports, and alerts", under App Context>Distributed Management Console, the "DMC Asset - Build Full" search was sitting. I simply enabled it and everything worked fine.

0 Karma

hexx
Splunk Employee
Splunk Employee

Just curious but why are you looking to edit this search? Also, was the search disabled manually?

Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...