Where do we find date of creation for Knowledge objects (Searches and reports, Event types, Tags, Fields and etc....) in splunk?
The creation date of objects is not tracked in the configuration files. The mod time is tracked for a very limited set of data in the configuration file local.meta. You will find it in the metadata folder of each app.
View solution in original post
Thank you lguinn..