Why was permission denied when clicking "view results" on alert?

[Hutch]

Hello fellow Splunkers,

One of our end users was attempting to investigate a Splunk Alert. When they attempted to access the URL contained in the email. They received a permissions denied error. They also received the same alert when manually navigating to the alert under the "Alerts" section and attempt to review the triggered alert. The alert permission are set so anybody can read the alert, but only Power Users and Admins are able to right.

I have reviewed a couple of other Splunk Community post regarding similar permission issues but was unable to locate a solution. Does anyone have an idea what could be causing this?

- Hutch

[DanielP1]

Hello Hutch,

Did you find a solution?

We have the same issue with some of our users. The users do have read and write permission. We found out, that the user can view results when he is the report owner, but not when he isn't the owner.

Cheers,

Dan

[Hutch]

@DanielP1 ,

We have not found a solution to this issue at this time. Were you all able to locate a fix?

[DanielP1]

Hello @Hutch 

We haven't found a solution so far. Any idea?

Cheers, Daniel