search

cerner / splunk-pickaxe

A tool for syncing a repo of splunk objects with a splunk instance
Apache License 2.0
16 stars 15 forks source link

Support deleting all Splunk artifacts owned by the logged in user #16

Open regimus opened 6 years ago

regimus commented 6 years ago

Currently any Splunk artifacts deleted in the local repository doesn't also get removed from the Splunk server. This means that we will accumulate more and more orphans over time.

One solution to this, if a service account is used, is to update the Pickaxe tool to clear out any Splunk artifacts owned by the service account, before the tool uploads everything.

bbaugher commented 6 years ago

I think this could definitely help. The change is likely not small or trivial though