Where do I find a list of orphaned searches, Reports and Alerts so they an be deleted or disabled? For the purpose of using my resources for no reason ?
Splunk has a dashboard "Orphaned Scheduled Searches, Reports, and Alerts" to find the orphaned knowledge objects. This dashboard is in search app.
Users can remove/reassign the orphaned knowledge objects from below.
Settings -> All Configurations -> Reassign Knowledge Objects -> Orphaned.
-- Hope this helps.
Thank u for your message. Please tell me how do I find this feature on the search head?
It's just like @anilchaithu present. Log into SH and then follow that path. Of course it needs that you have suitable role to see those values.
r. Ismo
Thank u sir as always. Stay safe.