Monitoring Splunk

Capability needed to list forwarder deployment

mart10
Path Finder

Hi!

I haven't gotten to the bottom of what permissions are needed for different actions. We would like to give someone with the 'user' role, to be able to access this page, in a read-only manner.

"app/splunk_monitoring_console/forwarder_deployment"

This, by making a new role that is dedicated to this purpose.
Is this possible? I see 'list_forwarders' is permitted from user. 

"Monitoring" or "console" does not give much hits in the list.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

You may be able to set the appropriate dashboard's permissions to allow a new role to have access, but the role will also need access to the _internal index.

---
If this reply helps you, Karma would be appreciated.
0 Karma

mart10
Path Finder

Thanks, I'll do some testing with this!

0 Karma
Get Updates on the Splunk Community!

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...