Splunk Search

Where do I find a list of orphaned searches, Reports and Alerts so they an be deleted or disabled?

SamHTexas
Builder

Where do I find a list of orphaned searches, Reports and Alerts so they an be deleted or disabled? For the purpose of using my resources for no reason ?

Labels (1)
Tags (1)
0 Karma

anilchaithu
Builder

@SamHTexas 

Splunk has a dashboard "Orphaned Scheduled Searches, Reports, and Alerts" to find the orphaned knowledge objects. This dashboard is in search app.

Users can remove/reassign the orphaned knowledge objects from below.

Settings -> All Configurations -> Reassign Knowledge Objects -> Orphaned.

 

-- Hope this helps.

SamHTexas
Builder

Thank u for your message. Please tell me how do I find this feature on the search head?

Tags (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

It's just like @anilchaithu present. Log into SH and then follow that path. Of course it needs that you have suitable role to see those values.

r. Ismo

SamHTexas
Builder

Thank u sir as always. Stay safe.

0 Karma
Get Updates on the Splunk Community!

Your Guide to Splunk Digital Experience Monitoring

A flawless digital experience isn't just an advantage, it's key to customer loyalty and business success. But ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...