https://community.splunk.com/t5/Alerting/Role-Capabilities-for-splunkd-log/m-p/555509#M10583 <P>Hi, what is the minimum capability without admin_for_all for a non-admin user to access splunkd-log object?</P> Fri, 11 Jun 2021 19:19:06 GMT eekanem 2021-06-11T19:19:06Z https://community.splunk.com/t5/Alerting/Role-Capabilities-for-splunkd-log/m-p/555509#M10583 <P>Hi, what is the minimum capability without admin_for_all for a non-admin user to access splunkd-log object?</P> Fri, 11 Jun 2021 19:19:06 GMT https://community.splunk.com/t5/Alerting/Role-Capabilities-for-splunkd-log/m-p/555509#M10583 eekanem 2021-06-11T19:19:06Z https://community.splunk.com/t5/Alerting/Role-Capabilities-for-splunkd-log/m-p/555523#M10584 <P>I am not sure what you mean by&nbsp;<SPAN>splunkd-log object but if you are trying to access splunkd internal logs, you just need to add&nbsp; those internal indexes or "_*"&nbsp; to&nbsp;srchIndexesAllowed .&nbsp;</SPAN></P> Fri, 11 Jun 2021 22:03:12 GMT https://community.splunk.com/t5/Alerting/Role-Capabilities-for-splunkd-log/m-p/555523#M10584 rupkumar4sec 2021-06-11T22:03:12Z https://community.splunk.com/t5/Alerting/Role-Capabilities-for-splunkd-log/m-p/555682#M10588 <P>That does not seem to be enough for me. I noticed that with the power user I could access the splunk internal logs so I added the capabilities to my role but it still does not work.</P> Mon, 14 Jun 2021 17:54:16 GMT https://community.splunk.com/t5/Alerting/Role-Capabilities-for-splunkd-log/m-p/555682#M10588 eekanem 2021-06-14T17:54:16Z