Deployment Architecture

How to provide field level role security for knowledge objects as well as custom fields?

vasanthmss
Motivator

Hi Splunker's,

How can I provide the field level role security for knowledge objects as well as custom fields?

Eg: Index=a sourcetype=s1,s2,s3 serialnumber=sn1,sn2,sn3,sn4

User1  can see s1,sn1,sn4
User2 can see s2,sn2,sn3
User3 can see s2,s3,sn1,sn2,sn3,sn4
V
1 Solution

somesoni2
Revered Legend

You can put your custom field filter into "search time restrictions" on the Roles. Go to Settings-> Access controls » Roles -> YOur Role for each user -> Search Restrictions -> Restrict search terms"

View solution in original post

somesoni2
Revered Legend

You can put your custom field filter into "search time restrictions" on the Roles. Go to Settings-> Access controls » Roles -> YOur Role for each user -> Search Restrictions -> Restrict search terms"

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...