https://community.splunk.com/t5/Splunk-Search/Real-Time-searches/m-p/23860#M4286 <P>--- deleted.. posted on wrong thread</P> Fri, 10 Jun 2016 00:34:19 GMT phoenixdigital 2016-06-10T00:34:19Z https://community.splunk.com/t5/Splunk-Search/Real-Time-searches/m-p/23858#M4284 <P>We have real-time search disabled for "users". We still see a few real-time searches by some users (they aren't power users, they aren't admins). Running 4.2.4. </P> <P>Is there a way for a user to override access to real-time search?</P> Tue, 29 Nov 2011 00:12:12 GMT https://community.splunk.com/t5/Splunk-Search/Real-Time-searches/m-p/23858#M4284 rmorlen 2011-11-29T00:12:12Z https://community.splunk.com/t5/Splunk-Search/Real-Time-searches/m-p/23859#M4285 <P>I do not understand your question clearly, but you can change user role if you want. Please refer to following doc.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/4.2.3/admin/Addandeditroles">http://docs.splunk.com/Documentation/Splunk/4.2.3/admin/Addandeditroles</A></P> Thu, 01 Dec 2011 07:47:38 GMT https://community.splunk.com/t5/Splunk-Search/Real-Time-searches/m-p/23859#M4285 Takajian 2011-12-01T07:47:38Z https://community.splunk.com/t5/Splunk-Search/Real-Time-searches/m-p/23860#M4286 <P>--- deleted.. posted on wrong thread</P> Fri, 10 Jun 2016 00:34:19 GMT https://community.splunk.com/t5/Splunk-Search/Real-Time-searches/m-p/23860#M4286 phoenixdigital 2016-06-10T00:34:19Z