- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The user has been removed from Splunk, and I am unable to locate any orphaned searches, reports, or alerts that were ass
MustataAlSaedi
Observer
01-21-2025
06:19 AM
The user has been removed from Splunk, and I am unable to locate any orphaned searches, reports, or alerts that were assigned to him
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

richgalloway

SplunkTrust
01-21-2025
08:12 AM
What seems to be the problem? Not all users own knowledge objects. How are you searching for them? If you have CLI access have you looked in $SPLUNK_HOME/etc/users?
---
If this reply helps you, Karma would be appreciated.
If this reply helps you, Karma would be appreciated.
