Splunk Enterprise Security

Is it possible to move Splunk Security Essentials Bookmark to Enterprise Security Search Head?

Rob2520
Communicator

Hi Splunkers,

We have a ton of bookmarked content in Splunk Security Essentials App on one of our Dev Splunk search heads. Now i want to move that to Enterprise Security Search Head. Is that possible? 

0 Karma

meetmshah
SplunkTrust
SplunkTrust

Hello, Just checking through if the issue was resolved or you have any further questions?

0 Karma

meetmshah
SplunkTrust
SplunkTrust

Hello @Rob2520, If you go to Content -> Manage Bookmarks section, there's a button for "Backup and Restore", have you tried that? Below screenshot for reference - 

meetmshah_0-1696388820275.png

Please accept the solution and hit Karma, if this helps!

Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...