WARN UserManagerPro - AQR not supported and [email protected] information not found in cache or 404 User not found
C:\Program Files\Splunk\etc\apps\splunk_app_db_connect\metadata\local.meta
When trying to delete inputs created in dbconnect, splunk was not able to authenticate the user via our IDP. To workaround this, edit local.meta, find the input to be deleted and change the owner =
[email protected] to owner = nobody.
Restart the splunkd service.