https://community.splunk.com/t5/Splunk-Search/Restrict-search-terms-tstats/m-p/92820#M23955 <P>The issue here was the user didn't have access to the data I was reporting on because the data was in a different Splunk app. Once I granted access to that app, everything worked.</P> <P>It would be nice to be able to share data between apps w/o granting access to the app directly.</P> Fri, 19 Apr 2013 18:35:58 GMT ccsfdave 2013-04-19T18:35:58Z https://community.splunk.com/t5/Splunk-Search/Restrict-search-terms-tstats/m-p/92819#M23954 <P>Greetings,</P> <P>I have a dashboard panel the runs the following:</P> <P><CODE>| tstats sum(bytes_sent) AS sumSent sum(bytes_received) AS sumReceived FROM pan_traffic groupby _time span=5m | timechart span=5m values("sumReceived") AS "Bytes Received" values("sumSent") AS "Bytes Sent"</CODE></P> <P>Groups with restricted search terms access this dashboard but their restrictions (on IP subnets) do not trigger and thus they can see all the results.</P> <P>Is there anything I can do about this?</P> <P>Thanks!</P> Fri, 12 Apr 2013 21:38:25 GMT https://community.splunk.com/t5/Splunk-Search/Restrict-search-terms-tstats/m-p/92819#M23954 ccsfdave 2013-04-12T21:38:25Z https://community.splunk.com/t5/Splunk-Search/Restrict-search-terms-tstats/m-p/92820#M23955 <P>The issue here was the user didn't have access to the data I was reporting on because the data was in a different Splunk app. Once I granted access to that app, everything worked.</P> <P>It would be nice to be able to share data between apps w/o granting access to the app directly.</P> Fri, 19 Apr 2013 18:35:58 GMT https://community.splunk.com/t5/Splunk-Search/Restrict-search-terms-tstats/m-p/92820#M23955 ccsfdave 2013-04-19T18:35:58Z