Splunk Search

Encountered the following error while trying to update: Cannot edit report that is embedded.

vikram_m
Path Finder

How to change the execution schedule of a report which is already embeded.

Also how to find if a report is embeded?

0 Karma

spunk311z
Path Finder

I agree that this makes no sense (that you cant edit a report or its query if its embeded some where).

but if that is required, then the number of pages and hoops you have to jump through just to change the query of an embeded report is un-reasonable. (and they are all on different pages / sections).

we have some reports embeded on status monitors (ie PRTG maps), and from time to time have to change a query, and its always way more difficult than it should be (and time consuming)

this needs to be improved, splunk.

splunker12er
Motivator

Once a report is embedded it cannot be edited. You must disable embedding for a report in order to edit it.

0 Karma

splunker12er
Motivator

to see embedding status:

| rest /services/saved/searches  | table title,author,embed.enabled
0 Karma
Get Updates on the Splunk Community!

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...