Splunk search for List all knowledge objects
Copy
| rest /servicesNS/-/-/admin/directory count=0 splunk_server=local | rename eai:* as *, acl.* as * | eval updated=strptime(updated,"%Y-%m-%dT%H:%M:%S%Z"), updated=if(isnull(updated),"Never",strftime(updated,"%d %b %Y"))| sort type | stats list(title) as title, list(type) as type, list(orphaned) as orphaned, list(sharing) as sharing, list(owner) as owner, list(updated) as updated by app
This search will provide a list of knowledge objects by app. The search will show who created the knowledge objects, who currently owns the knowledge objects, if the object is orphaned and what type of knowledge object it is. The search will also show when the object has been updated.
