search

splunk / terraform-provider-splunk

Terraform Provider for Splunk
Mozilla Public License 2.0
104 stars 78 forks source link

terraform destroy removed the wrong object #53

Open casey-hillman opened 3 years ago

casey-hillman commented 3 years ago

Background

I have a splunk instance with saved searches across two splunk apps (App1 and App2)

I have a saved search with name "SavedSearch1" that already exists in App1

I want to use terraform to create a saved search (named "SavedSearch1") in App2; terraform plan shows it will create 1 object and no conflicts.

Terraform create correctly creates the saved search (named "SavedSearch1") in App2; now there are two saved search, both named "SavedSearch1", with one in App1 and the other in App2.

Running terraform destroy deletes the "SavedSearch1" from App1 while expected behavior was for it to delete "SavedSearch1" from App2.

anushjay commented 3 years ago

Hi @casey-hillman Can you try creating your search resource with the acl{} object. Specify the expected acl.app under acl{} and let me know if you're still running into issues.

casey-hillman commented 3 years ago

Hello, we are using the acl{} object and specifying the acl.app but it still destroys the search in the wrong app.