Where do we find date of creation for Knowledge objects in Splunk?

[rsathish47]

Hi All,

Where do we find date of creation for Knowledge objects (Searches and reports, Event types, Tags, Fields and etc....) in splunk?

Thanks
Sathish R

[lguinn2 · Accepted solution]

The creation date of objects is not tracked in the configuration files. The mod time is tracked for a very limited set of data in the configuration file local.meta. You will find it in the metadata folder of each app.

[rsathish47]

Thank you lguinn..