https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-create-a-role-based-search-filter-on-a/m-p/234772#M45738 <P>We'd like to grant access to an additional index to a role, but we only want the members to be able to view 2 sourcetypes in that index.</P> <P>I added a role called: <STRONG>foo_filtered</STRONG><BR /> I added a search filter of: "service=Amazon OR service=Ebay" to that role<BR /> I gave that role access to an index named "vendor"</P> <P>Their existing role <STRONG>foo_mail</STRONG> has access to search the "mail" and "spam" indexes.</P> <P>So, when I add the <STRONG>foo_filtered</STRONG> role to their group, ALL searches (regardless of index) apply the filter. I only want the filter applied if they're searching the "vendor" index.</P> <P>Is this even possible?<BR /> Thank you</P> Mon, 21 Nov 2016 21:01:38 GMT pkeller 2016-11-21T21:01:38Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-create-a-role-based-search-filter-on-a/m-p/234772#M45738 <P>We'd like to grant access to an additional index to a role, but we only want the members to be able to view 2 sourcetypes in that index.</P> <P>I added a role called: <STRONG>foo_filtered</STRONG><BR /> I added a search filter of: "service=Amazon OR service=Ebay" to that role<BR /> I gave that role access to an index named "vendor"</P> <P>Their existing role <STRONG>foo_mail</STRONG> has access to search the "mail" and "spam" indexes.</P> <P>So, when I add the <STRONG>foo_filtered</STRONG> role to their group, ALL searches (regardless of index) apply the filter. I only want the filter applied if they're searching the "vendor" index.</P> <P>Is this even possible?<BR /> Thank you</P> Mon, 21 Nov 2016 21:01:38 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-create-a-role-based-search-filter-on-a/m-p/234772#M45738 pkeller 2016-11-21T21:01:38Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-create-a-role-based-search-filter-on-a/m-p/234773#M45739 <P>This is not possible with the current version of Splunk, unfortunately. You can submit an enhancement request on the Support Portal and they might add it in the future though.</P> Tue, 22 Nov 2016 00:33:16 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-create-a-role-based-search-filter-on-a/m-p/234773#M45739 masonmorales 2016-11-22T00:33:16Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-create-a-role-based-search-filter-on-a/m-p/234774#M45740 <P>Is this still true?</P> Fri, 27 Sep 2019 16:49:36 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-create-a-role-based-search-filter-on-a/m-p/234774#M45740 wryanthomas 2019-09-27T16:49:36Z