https://community.splunk.com/t5/Splunk-Dev/Search-app-and-default-indexes/m-p/101168#M1468 <P>I suppose you are using Search Head Pooling as well. In that case, it is possible the user and role configuration files such as <EM>authorize.conf</EM> reside in <EM>etc/system/local</EM> instead of <EM>etc/apps</EM> and are therefore not shared between search heads. You might have to configure both search heads independently in that case. </P> Sun, 27 Jan 2013 12:24:17 GMT Paolo_Prigione 2013-01-27T12:24:17Z https://community.splunk.com/t5/Splunk-Dev/Search-app-and-default-indexes/m-p/101167#M1467 <P>After configuring my search heads and peers to use the mounted bundle, the default search dashboard no longer includes the default indexes I gave the role access to. Is it expected that this will take a while to generate?</P> Sun, 27 Jan 2013 08:30:11 GMT https://community.splunk.com/t5/Splunk-Dev/Search-app-and-default-indexes/m-p/101167#M1467 mlwelch 2013-01-27T08:30:11Z https://community.splunk.com/t5/Splunk-Dev/Search-app-and-default-indexes/m-p/101168#M1468 <P>I suppose you are using Search Head Pooling as well. In that case, it is possible the user and role configuration files such as <EM>authorize.conf</EM> reside in <EM>etc/system/local</EM> instead of <EM>etc/apps</EM> and are therefore not shared between search heads. You might have to configure both search heads independently in that case. </P> Sun, 27 Jan 2013 12:24:17 GMT https://community.splunk.com/t5/Splunk-Dev/Search-app-and-default-indexes/m-p/101168#M1468 Paolo_Prigione 2013-01-27T12:24:17Z