Archive

List of all Admin Users report

New Member

I have the search to list the Admins in Splunk. I need to have it as a saved search or dashboard a non-Admin can save the screen shot. Seems I need like to run the search in elevated privileges. Any ideas?

Tags (1)
0 Karma

SplunkTrust
SplunkTrust

You, as a admin, can setup a summary index OR a lookup table with list of Admin users. That way you can make it available to non-admin users (by setting proper permissions for the index or for the lookup table). You can use 2nd link from @harishalipaka's comment below for query to get the list.

0 Karma

New Member

Yes, I have the search. Just wish Splunk had a way a user could run the search as an admin to get all the results. I think we also tried to do a scheduled report and that failed.

0 Karma

SplunkTrust
SplunkTrust

I would suggest you save your scheduled search report into a lookup table (using outputlookup command) OR into a summary index (to an index accessible by all). Then your non-admin users can write a search based off your lookup table (inputlookup command) OR against the summary index.

0 Karma