There are descriptions on managing orphanedknowledgeobjects after deletion of users, for reasons such as change of operator in the following manuals.
http://docs.splunk.com/Documentation/S...
I have a couple orphaned searches owned by a user who is no longer with the company ( his user id was deleted ) . Im trying to re enable those searches but im unable to find them under Reassign Knowledge...
I am trying to change the ownership of a dashboard in splunk enterprise version 6.6x. It looks like I might be able to do it through the REST api but I so far have only found a way to change the owne...
There were a few orphaned searches that were linked to a user that had left. I had reassigned these (knowledgeobjects) to a current user, but the alerts still appear on the message board.&n...
I run following search to look for orphaned searches/alerts:
| rest splunk_server=local /servicesNS/-/-/saved/searches add_orphan_field=yes count=0
| search orphan=1 disabled=0 is_scheduled=1...
...ould be useful if the knowledgeobjectmanagement interface in splunk web provided some sort of dependency enumeration (and perhaps search and replace) upon request for delete or clone or rename, etc. J...
I've got some users who are no longer around in my Splunk instance and I want to remove the user created objects. Is there a procedure I can follow for this task?
I want to reassign knowledgeobjects that are orphaned, which I know can do through All Configurations->Reassign KnowledgeObjects.
Before reassignment I need to download all the orphanedobjects...
Where do I find a list of orphaned searches, Reports and Alerts so they an be deleted or disabled? For the purpose of using my resources for no reason ?
Hi, In my organization a particular user id has been disabled and is there any drawback on searches or in running environment. for example below. 1. if user has been created any searc...