If we have an ldap user that is deactivated, what happens to all of his scheduled searches and other user content like views, tags, field extractions?
Has someone come up with steps or a script to migrate all content for a disabled user to another user?
There isn't a script that I'm aware of, but perhaps this info might be useful:
http://splunk-base.splunk.com/answers/44677/delete-owner-of-scheduled-searches
Hope that helps!