Re: Capability to edit alerts - Splunk Community

Getting Data In

Hello everyone!

I create the role for splunk users, which will be able to edit alerts.

What capabilities should I choose for such users? To be minimal and sufficient

I believe that's covered by the schedule_search capability.

---
If this reply helps you, Karma would be appreciated.

Get Updates on the Splunk Community!

Deep Dive: Optimizing Telemetry Pipelines in Splunk Observability Cloud

In this session, we will peel back the layers of Splunk Observability Cloud’s cost-optimization features. ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Data Drivers: How We're Streaming Real-Time F1 Telemetry Directly into Splunk ...

Data Drivers: Every Lap Tells a Story The Spectacle Two F1 racing sims go head-to-head on the .conf26 show ...