Splunk Enterprise Security

Reassigning Ownership of all items in Splunk

kevin_call
New Member

We have an employee that left the company and we need to re-assign ownership to a new person. Is there a way to do a mass change of ownership for all items in Splunk for a given user?

0 Karma

ivanreis
Builder

you have to have admin role to run this,
go to menu settings/All configurations
on the top of screen at the right corner, please hit the button "Reassign Knowledge Objects"
a new screen will show up with the objects and you have to select them to reassign to other owner

0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...