How to limit users from seeing my search query in scheduled reports?

Path Finder

Hi Splunkers

My dashboard uses a lot of scheduled reports. Although I have limited user access to my dashboard xml code, can I limit user access to scheduled reports? Currently, users can open up scheduled reports and amend my query and save them.

Thanks for reading.

0 Karma


You can give only read access to that user group (and splunk permissions are based on usergroup level, not on individual level). Giving read access alone should solve your problem.

0 Karma

Revered Legend

You can lockdown access to your scheduled report (or any knowledge artifact for that matter) by providing appropriate sharing permission for roles. Please note that if you keep Write access for a role, all the users within that Role would be able to write/modify it.

0 Karma
Get Updates on the Splunk Community!

Observability Highlights | November 2022 Newsletter

 November 2022Observability CloudEnd Of Support Extension for SignalFx Smart AgentSplunk is extending the End ...

Avoid Certificate Expiry Issues in Splunk Enterprise with Certificate Assist

This blog post is part 2 of 4 of a series on Splunk Assist. Click the links below to see the other ...

Using Machine Learning for Hunting Security Threats

REGISTER NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more ...