<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic odd problem with share report in Reporting</title>
    <link>https://community.splunk.com/t5/Reporting/odd-problem-with-share-report/m-p/485924#M7776</link>
    <description>&lt;P&gt;Hi&lt;BR /&gt;I create report and share with users (join to ldap server). they can see report but when click on numbers that show on table do not have result. while admin user do the same thing and result load successfully.&lt;BR /&gt;seem users need to access "RootObject".&lt;/P&gt;
&lt;P&gt;FYI:&lt;BR /&gt;1-give read permission to all users.&lt;BR /&gt;2-report run as report owner.&lt;BR /&gt;3-give permission to users to access index.&lt;BR /&gt;4-give permission to users to access data model.&lt;BR /&gt;5-inspect job : INFO UserManager - Unwound user context: myuser-&amp;gt; NULL&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="alt text"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/8788iE0904FFD0BEAE362/image-size/large?v=v2&amp;amp;px=999" role="button" title="alt text" alt="alt text" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;Any recommendation?&lt;BR /&gt;Thanks,&lt;/P&gt;</description>
    <pubDate>Mon, 08 Jun 2020 20:44:08 GMT</pubDate>
    <dc:creator>indeed_2000</dc:creator>
    <dc:date>2020-06-08T20:44:08Z</dc:date>
    <item>
      <title>odd problem with share report</title>
      <link>https://community.splunk.com/t5/Reporting/odd-problem-with-share-report/m-p/485924#M7776</link>
      <description>&lt;P&gt;Hi&lt;BR /&gt;I create report and share with users (join to ldap server). they can see report but when click on numbers that show on table do not have result. while admin user do the same thing and result load successfully.&lt;BR /&gt;seem users need to access "RootObject".&lt;/P&gt;
&lt;P&gt;FYI:&lt;BR /&gt;1-give read permission to all users.&lt;BR /&gt;2-report run as report owner.&lt;BR /&gt;3-give permission to users to access index.&lt;BR /&gt;4-give permission to users to access data model.&lt;BR /&gt;5-inspect job : INFO UserManager - Unwound user context: myuser-&amp;gt; NULL&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="alt text"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/8788iE0904FFD0BEAE362/image-size/large?v=v2&amp;amp;px=999" role="button" title="alt text" alt="alt text" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;Any recommendation?&lt;BR /&gt;Thanks,&lt;/P&gt;</description>
      <pubDate>Mon, 08 Jun 2020 20:44:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/odd-problem-with-share-report/m-p/485924#M7776</guid>
      <dc:creator>indeed_2000</dc:creator>
      <dc:date>2020-06-08T20:44:08Z</dc:date>
    </item>
    <item>
      <title>Re: odd problem with share report</title>
      <link>https://community.splunk.com/t5/Reporting/odd-problem-with-share-report/m-p/485925#M7777</link>
      <description>&lt;P&gt;Hello @mehrdad_2000 ,&lt;/P&gt;

&lt;P&gt;try run as user and delete the second pipe and everything after it:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index="masked" | search "masked"
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;if the user can see results continue with the next set (rename) and so on.&lt;/P&gt;

&lt;P&gt;Let me know how it went&lt;/P&gt;</description>
      <pubDate>Sun, 03 May 2020 13:30:06 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/odd-problem-with-share-report/m-p/485925#M7777</guid>
      <dc:creator>PavelP</dc:creator>
      <dc:date>2020-05-03T13:30:06Z</dc:date>
    </item>
    <item>
      <title>Re: odd problem with share report</title>
      <link>https://community.splunk.com/t5/Reporting/odd-problem-with-share-report/m-p/485926#M7778</link>
      <description>&lt;P&gt;As you see i have 2 search, when user delete whatever exist in second search users able to see events.&lt;BR /&gt;
Any idea?&lt;/P&gt;</description>
      <pubDate>Sun, 03 May 2020 15:19:38 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/odd-problem-with-share-report/m-p/485926#M7778</guid>
      <dc:creator>indeed_2000</dc:creator>
      <dc:date>2020-05-03T15:19:38Z</dc:date>
    </item>
  </channel>
</rss>

