Enterprise Search: Can we delete or clone correlation searches in the Content Management section?

[danielbb]

Under the Content Management section, we only see the Enable and Disable options for the correlation searches. Is there a way to clone, or delete them? Changing their names is needed quite often.

[Azeemering]

Update on this.
In current versions (6.x and higher) you are now able to Clone a Correlation Search under Content Management in Enterprise Security.
To delete a correlation search you can go to Settings > Searches, reports, and alerts

[cyue_splunk]

There is no delete or clone in the Content Management in ES app. You can find your correlation search and delete or clone it in Splunk Enterprise "Settings" ->"Searches, reports and alerts".

[starcher · Accepted solution]

No there is no feature in the ES UI for that. Renaming would be nice. Best you can do is find the search under saved searches. Delete then recreate it.