- Splunk Answers
- :
- Using Splunk
- :
- Alerting
- :
- How do you restrict users roles/capabilities with ...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
Many times, our users create alerts/reports with the cron expression as * * * * * or */1* * * *.
And we have to chase the users with back and forth emails and lots of confusion.
So, to avoid these issues, it would be better that if we could restrict users by their roles/capabilities with the cron expressions.
Please if you have some ideas/workarounds.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
one idea would be ...
From Answer by @the_wolverine and @strive
Set the capabilities for roles in authorize.conf configuration file
[capability::schedule_search]
schedule_search = disabled
(requires save and restart)
Note:
By default all the capabilities are disabled.
Roles inherit all capabilities from imported roles, and inherited capabilities cannot be disabled.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi All... any suggestions, ideas please
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi All... any suggestions, ideas please..
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
one idea would be ...
From Answer by @the_wolverine and @strive
Set the capabilities for roles in authorize.conf configuration file
[capability::schedule_search]
schedule_search = disabled
(requires save and restart)
Note:
By default all the capabilities are disabled.
Roles inherit all capabilities from imported roles, and inherited capabilities cannot be disabled.
Routing logs with Splunk OTel Collector for Kubernetes
Welcome to the Splunk Community!
Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM
