Is Splunkd service in windows a forwarder ???How to find out my privileges in splunk(eg.,Admin or user or ....)???

[rashokciet]

1.Is Splunkd service in windows a splunk forwarder???
2.How to find out my previlages in splunkweb(https://splunkxxxxx.com) ???

Thanks in advance

[stephanefotso]

1. No, splunkd is not a forwarder

2. To see your privilages:

   -- If you don't know your Roles, first navigate to Settings-->Access controls-->Users to see your Roles
   -- Once you know your Roles, navigate to Settings-->Access controls-->Roles, click on your Role name and see your privilages(capabilities).

[rashokciet]

What is splunkd service??What is the difference between Splunkd service and splunk forwarder??
I cant see Access controls option in Settings in splunkweb so do i require admin access to view the Users/roles ??

Thanks.

[stephanefotso]

1. splunkd is a distributed C/C++ server that accesses, processes, and indexes streaming machine data and handles search requests.
2. The forwarder can not handle searche requests. It consume data locally and then forward the data across the network to another Splunk Enterprise component, called the indexer which indexes the data and runs searches..
3. Yes of course you should have admin Role to view the Users Roles.