https://community.splunk.com/t5/Splunk-User-Behavior-Analytics/Admin-user-can-t-access-alerts-with-private-sharing/m-p/535628#M17 <P>Hi,</P><P>Kind of a splunk newbie here.</P><P>I’m attempting to setup monitoring on user alerts with long runtimes.</P><P>I logged on as the admin user, and attempted to query the _audit index. Unfortunately, I’m only able to see searches whose privacy is set to either “Global” or “App”.&nbsp;</P><P>To verify that behavior, I logged on as a simple user and created a private alert. When I searched for that alert from the admin user, I couldn’t find it.&nbsp;<BR /><BR />My current “admin” role settings only inherits from “power”.&nbsp;<BR />My “admin” user has only the “admin” as its selected role.&nbsp;<BR /><SPAN>Tries to play around with both of those settings, to no avail.&nbsp;<BR /></SPAN></P><P><SPAN>Any recommendations?</SPAN></P> Wed, 13 Jan 2021 10:28:19 GMT uryyakir 2021-01-13T10:28:19Z https://community.splunk.com/t5/Splunk-User-Behavior-Analytics/Admin-user-can-t-access-alerts-with-private-sharing/m-p/535628#M17 <P>Hi,</P><P>Kind of a splunk newbie here.</P><P>I’m attempting to setup monitoring on user alerts with long runtimes.</P><P>I logged on as the admin user, and attempted to query the _audit index. Unfortunately, I’m only able to see searches whose privacy is set to either “Global” or “App”.&nbsp;</P><P>To verify that behavior, I logged on as a simple user and created a private alert. When I searched for that alert from the admin user, I couldn’t find it.&nbsp;<BR /><BR />My current “admin” role settings only inherits from “power”.&nbsp;<BR />My “admin” user has only the “admin” as its selected role.&nbsp;<BR /><SPAN>Tries to play around with both of those settings, to no avail.&nbsp;<BR /></SPAN></P><P><SPAN>Any recommendations?</SPAN></P> Wed, 13 Jan 2021 10:28:19 GMT https://community.splunk.com/t5/Splunk-User-Behavior-Analytics/Admin-user-can-t-access-alerts-with-private-sharing/m-p/535628#M17 uryyakir 2021-01-13T10:28:19Z