<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: sourcetype visibility to Splunk Apps in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/sourcetype-visibility-to-Splunk-Apps/m-p/37019#M6841</link>
    <description>&lt;P&gt;See the responses here:&lt;BR /&gt;
&lt;A href="http://answers.splunk.com/answers/110479/cant-access-data-from-non-main-index-using-custom-app-sideview-utils"&gt;http://answers.splunk.com/answers/110479/cant-access-data-from-non-main-index-using-custom-app-sideview-utils&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;Basically, visibility at the sourcetype (and index) level is defined by the logged-in user's role, not by the application itself.&lt;/P&gt;</description>
    <pubDate>Mon, 11 Nov 2013 20:36:39 GMT</pubDate>
    <dc:creator>RMartinezDTV</dc:creator>
    <dc:date>2013-11-11T20:36:39Z</dc:date>
    <item>
      <title>sourcetype visibility to Splunk Apps</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/sourcetype-visibility-to-Splunk-Apps/m-p/37018#M6840</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;I have a universal forwarder forwarding some log files to a Splunk index instance. I created a sourcetype for these log files. Now in the default search app, I can see the logs when I type "sourcetype=xxx".  But the same sourcetype is not available in the Splunk app I created. &lt;/P&gt;

&lt;P&gt;Is all sourcetypes visable to all Splunk apps? If not, where can I configure the permissions?&lt;/P&gt;

&lt;P&gt;Thanks.&lt;/P&gt;</description>
      <pubDate>Thu, 16 May 2013 18:46:31 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/sourcetype-visibility-to-Splunk-Apps/m-p/37018#M6840</guid>
      <dc:creator>csclement</dc:creator>
      <dc:date>2013-05-16T18:46:31Z</dc:date>
    </item>
    <item>
      <title>Re: sourcetype visibility to Splunk Apps</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/sourcetype-visibility-to-Splunk-Apps/m-p/37019#M6841</link>
      <description>&lt;P&gt;See the responses here:&lt;BR /&gt;
&lt;A href="http://answers.splunk.com/answers/110479/cant-access-data-from-non-main-index-using-custom-app-sideview-utils"&gt;http://answers.splunk.com/answers/110479/cant-access-data-from-non-main-index-using-custom-app-sideview-utils&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;Basically, visibility at the sourcetype (and index) level is defined by the logged-in user's role, not by the application itself.&lt;/P&gt;</description>
      <pubDate>Mon, 11 Nov 2013 20:36:39 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/sourcetype-visibility-to-Splunk-Apps/m-p/37019#M6841</guid>
      <dc:creator>RMartinezDTV</dc:creator>
      <dc:date>2013-11-11T20:36:39Z</dc:date>
    </item>
  </channel>
</rss>

