splunk_delete_saved_search
Delete an existing Splunk saved search by name, with write mode and explicit human confirmation required. Use this tool to remove outdated or unwanted saved searches safely.
Instructions
Delete an existing saved search (requires write mode and human confirmation).
Args: name: Name of the saved search to delete. confirm: Confirmation flag.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | ||
| confirm | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| data | No | Output payload or results | |
| error | No | Error message if execution failed | |
| success | No | Whether the tool execution succeeded | |
| metadata | No | Execution timing, pagination and environment details | |
| warnings | No | Operational warnings or notices | |
| request_id | No | Correlation ID for audit trail and observability |