Hi,
I have a question about customizing splunk view for specific user.
I have views called
System Admin view for sysadmin
Application Admin for appadmin
How do I assign these two views for them when they first logon to splunk instead of the default one?
Thanks!
Wendy
You could setup seperate Splunk apps for system admins and application admins.
And then by using Splunk's role based access controls , set the default app for the "sysadmin" role and the "applicationadmin" role.
Within each of these apps you can then define which is the default view, scroll down to "Set a Default View".
And then when a user logs in , depending on what role they are in , they will land on the intended default view.
Hi,
I created an app and chose "barebone". When I go into this app and try to run search, it gives me Could not find writer for: /psadmin/sysadmin/history/.dummy_history [0] [C:\Program Files\Splunk\etc]. Is there a permission setting I need to do?
thanks in advance,
Wendy