Splunk Enterprise Security

Reassigning Ownership of all items in Splunk

kevin_call
New Member

We have an employee that left the company and we need to re-assign ownership to a new person. Is there a way to do a mass change of ownership for all items in Splunk for a given user?

0 Karma

ivanreis
Builder

you have to have admin role to run this,
go to menu settings/All configurations
on the top of screen at the right corner, please hit the button "Reassign Knowledge Objects"
a new screen will show up with the objects and you have to select them to reassign to other owner

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...

Design, Compete, Win: Submit Your Best Splunk Dashboards for a .conf26 Pass

Hello Splunkers,  We’re excited to kick off a Splunk Dashboard contest! We know that dashboards are a primary ...

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...