topic Re: Capability needed to list forwarder deployment in Monitoring Splunk

Capability needed to list forwarder deployment

mart10 — Thu, 05 Nov 2020 10:22:00 GMT

Hi!

I haven't gotten to the bottom of what permissions are needed for different actions. We would like to give someone with the 'user' role, to be able to access this page, in a read-only manner.

"app/splunk_monitoring_console/forwarder_deployment"

This, by making a new role that is dedicated to this purpose.
Is this possible? I see 'list_forwarders' is permitted from user.

"Monitoring" or "console" does not give much hits in the list.

Re: Capability needed to list forwarder deployment

richgalloway — Thu, 05 Nov 2020 15:17:39 GMT

You may be able to set the appropriate dashboard's permissions to allow a new role to have access, but the role will also need access to the _internal index.

Re: Capability needed to list forwarder deployment

mart10 — Wed, 11 Nov 2020 05:10:53 GMT

Thanks, I'll do some testing with this!