Dashboards & Visualizations

What is the order if precedence with default_namespace?

ejwade
Contributor

I'm trying to determine the order of precedence when a user has two roles that both assign a default app (i.e., user-prefs.conf, default_namespace).

For example, user "bob" has the following roles: workspace_default and workspace_engineering.

On the search head, in the acme_zglobal_ta app:

user-prefs.conf

[role_workspace_default]

default_namespace = global_app

In the acme_engineering_ta app:

[role_workspace_engineering]

default_namespace = engineering_app

The lexicographical sorting of the apps doesn't seem to play into it, since the global_app is given to Bob. Any insights?

0 Karma
1 Solution

ejwade
Contributor

I tested this further, and it appears roles do have a lexicographical precedence based on the role name.

View solution in original post

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @ejwade,

I think that the use has both the roles and the sum of the feature of both the roles.

For my knowledge, there isn't a precedence in roles: if you have two roles you have the features of both of them.

Ciao.

Giuseppe

ejwade
Contributor

I tested this further, and it appears roles do have a lexicographical precedence based on the role name.

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @ejwade ,

good for you, see next time!

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated 😉

ejwade
Contributor

Thanks again, @gcusello!

0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...