Splunk Search
Highlighted

Where do we find date of creation for Knowledge objects in Splunk?

Contributor

Hi All,

Where do we find date of creation for Knowledge objects (Searches and reports, Event types, Tags, Fields and etc....) in splunk?

Thanks
Sathish R

Tags (2)
Highlighted

Re: Where do we find date of creation for Knowledge objects in Splunk?

Legend

The creation date of objects is not tracked in the configuration files. The mod time is tracked for a very limited set of data in the configuration file local.meta. You will find it in the metadata folder of each app.

View solution in original post

Highlighted

Re: Where do we find date of creation for Knowledge objects in Splunk?

Contributor

Thank you lguinn..

0 Karma