https://community.splunk.com/t5/Security/Cannot-suppress-notable-event/m-p/166804#M14699 <P>To enable notable event suppression for esanalyst role add edit-suppressions to the role and make sure they have write permission in the SA-ThreatIntelligence app.</P> Fri, 09 Oct 2015 19:06:33 GMT rroberts 2015-10-09T19:06:33Z https://community.splunk.com/t5/Security/Cannot-suppress-notable-event/m-p/166803#M14698 <P>Working in the esanalyst role I cannot suppress a notable event in ES 3.0.<BR /> Is this working as designed? If so, what capability do I need to give the role?</P> Wed, 26 Feb 2014 18:53:23 GMT https://community.splunk.com/t5/Security/Cannot-suppress-notable-event/m-p/166803#M14698 rroberts 2014-02-26T18:53:23Z https://community.splunk.com/t5/Security/Cannot-suppress-notable-event/m-p/166804#M14699 <P>To enable notable event suppression for esanalyst role add edit-suppressions to the role and make sure they have write permission in the SA-ThreatIntelligence app.</P> Fri, 09 Oct 2015 19:06:33 GMT https://community.splunk.com/t5/Security/Cannot-suppress-notable-event/m-p/166804#M14699 rroberts 2015-10-09T19:06:33Z https://community.splunk.com/t5/Security/Cannot-suppress-notable-event/m-p/166805#M14700 <P>I gave my ess_analysts the edit-suppressions role. They don't have write access to SA-ThreatIntelligence though and aren't experiencing any problems yet.</P> Tue, 26 Jan 2016 18:44:16 GMT https://community.splunk.com/t5/Security/Cannot-suppress-notable-event/m-p/166805#M14700 AndySplunks 2016-01-26T18:44:16Z