Hello,
I am doing a clean-up of our users and need to remove a large number of users and many of those users own all different kinds of objects. I know that I need to change the owner of these objects in the local.meta file, but do I need to do it for all objects that they own? (lookups, indexes, saved searches, etc)
Also- when I am changing these owners- do I need to restart Splunk after making these changes? Or are there any certain protocols necessary for when editing a local.meta folder?
Lastly- is there any way to just remove the owner or do I need to change the owner to a maintenance account?
↧