our main Splunk administrator retired and we since disabled his Active Directory account which he used to create and manage hundreds of Splunk searches, now listed as Orphaned under Settings \ All C...
I am trying to change the ownership of a dashboard in splunk enterprise version 6.6x. It looks like I might be able to do it through the REST api but I so far have only found a way to change the o...
...eing replicated.
To further elaborate, permissions changes made in the "Manage Apps" page are not being propagated through the Search Head Cluster. However, permissions changes made on individual Knowledge...
Hi, We are planing to go for Splunk Enterprise. Could you please clarify my below queries to make us more understandable. 1. Can we use multiple projects in one login itself. 2...
...howing up in "Forwarder Management" but I can't seem to get event logs from any servers except the deployment server. I have enabled firewall ports outbound 8089 and inbound 9997 on the deployment server. T...
Hi I checked splunk today to find the following error, however I did not exceed any quota's. I had a trial licence and today switched to a free licence. I've read other posts about this and have seen...
...irectory seems much less cluttered. I have a gut-reaction to the idea of my searches being influenced by a confusing group of knowledgeobjects spread across many different pages (tags, event types, m...