Splunk Enterprise Security

Reassigning Ownership of all items in Splunk

kevin_call
New Member

We have an employee that left the company and we need to re-assign ownership to a new person. Is there a way to do a mass change of ownership for all items in Splunk for a given user?

0 Karma

ivanreis
Builder

you have to have admin role to run this,
go to menu settings/All configurations
on the top of screen at the right corner, please hit the button "Reassign Knowledge Objects"
a new screen will show up with the objects and you have to select them to reassign to other owner

0 Karma
Get Updates on the Splunk Community!

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...