https://community.splunk.com/t5/Deployment-Architecture/customized-NIX-app-for-external-users/m-p/71422#M2469 <P>Unfortunately version 4.6 and before of the *nix app is hard coded to index=os. This is was a mistake. To fix, you would have to copy unix/default/savedsearches.conf to unix/local/savedsearches.conf and change the references to index=os to the index where your data lives.</P> Fri, 22 Mar 2013 15:16:22 GMT araitz 2013-03-22T15:16:22Z https://community.splunk.com/t5/Deployment-Architecture/customized-NIX-app-for-external-users/m-p/71421#M2468 <P>Hi,</P> <P>since few days I<CODE>m trying to configure access to *NIX application to my external users.<BR /> I</CODE>m using that application to monitor my linux servers located in the cloud. To keep separate data for each group of the servers I created dedicated indexes and users. <BR /> Each user have access only to his own index.</P> <P>Problem:<BR /> I<CODE>m login with user "teama", I</CODE>m clicking on *UNIX app. Next from the top menu I`m choosing:</P> <P>CPU -- &gt; CPU by host</P> <P><IMG src="http://img26.imageshack.us/img26/9475/splunkcpumennu.png" alt="alt text" /></P> <P>And it seems that is not working. In index for that user I see CPU data. It seems that *UNIX app searching by default in "os" index. How to change it ? I need to setup for each user different default index. Maybe somebody could support me ?</P> <P><IMG src="http://img9.imageshack.us/img9/3456/splunkcpumennu1.png" alt="alt text" /></P> Fri, 22 Mar 2013 12:00:15 GMT https://community.splunk.com/t5/Deployment-Architecture/customized-NIX-app-for-external-users/m-p/71421#M2468 konradwawryn 2013-03-22T12:00:15Z https://community.splunk.com/t5/Deployment-Architecture/customized-NIX-app-for-external-users/m-p/71422#M2469 <P>Unfortunately version 4.6 and before of the *nix app is hard coded to index=os. This is was a mistake. To fix, you would have to copy unix/default/savedsearches.conf to unix/local/savedsearches.conf and change the references to index=os to the index where your data lives.</P> Fri, 22 Mar 2013 15:16:22 GMT https://community.splunk.com/t5/Deployment-Architecture/customized-NIX-app-for-external-users/m-p/71422#M2469 araitz 2013-03-22T15:16:22Z