topic Re: user is not able to delete alert in Alerting

user is not able to delete alert

HansK — Fri, 13 Dec 2013 15:04:35 GMT

What capabilities are needed for a user to delete alerts created by himself?

At the moment it is not possible on our system, no error is given to the user when he selects delete but nothing happens.

ChrisG — Fri, 13 Dec 2013 16:11:42 GMT

Does the user have the "power" role?

piebob — Fri, 13 Dec 2013 17:01:27 GMT

as a follow-on, it looks as though the "schedule_search" capability is what allows users to work with alerts, but i'm not 100% sure it allows deletion. here's the info about roles and capabilities in Splunk: http://docs.splunk.com/Documentation/Splunk/6.0/Security/Rolesandcapabilities

HansK — Tue, 17 Dec 2013 07:51:13 GMT

The user does not have the power role, he does have the schedule_search capability though.

altink — Wed, 20 Jan 2021 14:50:48 GMT

Hello @HansK

Did you find a solution for Deleting the Alert?

I have the same issue, yet not resolved.

best regards
Altin