Security

Is there a smart way to assign user owned private elements to a new owner?

tpaulsen
Contributor

Hi,

We always run into the problem where people leave our organization, we delete their account in Splunk, but want to keep their automated reports and dashboards. Is there a smart solution to move one app/dashboard/scheduled search/field/whateverelement to a new owner?

Thank you in advance, Tom

0 Karma

pradeepkumarg
Influencer

tpaulsen
Contributor

Can this also applied for other Splunk elements like fields, macros etc?

0 Karma

somesoni2
Revered Legend

The answer basically does a Splunk REST API endpoint POST call. See full list of Splunk API endpoints here.

http://docs.splunk.com/Documentation/Splunk/6.2.6/RESTREF/RESTlist

.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!