Is there a smart way to assign user owned private elements to a new owner?

[tpaulsen]

Hi,

We always run into the problem where people leave our organization, we delete their account in Splunk, but want to keep their automated reports and dashboards. Is there a smart solution to move one app/dashboard/scheduled search/field/whateverelement to a new owner?

Thank you in advance, Tom

[pradeepkumarg]

Look at the below answer

http://answers.splunk.com/answers/290023/what-is-the-best-way-to-move-a-saved-search-from-o.html#ans...

[tpaulsen]

Can this also applied for other Splunk elements like fields, macros etc?

[somesoni2]

The answer basically does a Splunk REST API endpoint POST call. See full list of Splunk API endpoints here.

http://docs.splunk.com/Documentation/Splunk/6.2.6/RESTREF/RESTlist