List of all Admin Users report

[dcrooks_cbp]

I have the search to list the Admins in Splunk. I need to have it as a saved search or dashboard a non-Admin can save the screen shot. Seems I need like to run the search in elevated privileges. Any ideas?

[somesoni2]

You, as a admin, can setup a summary index OR a lookup table with list of Admin users. That way you can make it available to non-admin users (by setting proper permissions for the index or for the lookup table). You can use 2nd link from @harishalipaka's comment below for query to get the list.

[dcrooks_cbp]

Yes, I have the search. Just wish Splunk had a way a user could run the search as an admin to get all the results. I think we also tried to do a scheduled report and that failed.

[somesoni2]

I would suggest you save your scheduled search report into a lookup table (using outputlookup command) OR into a summary index (to an index accessible by all). Then your non-admin users can write a search based off your lookup table (inputlookup command) OR against the summary index.