Reporting

List of all Admin Users report

dcrooks_cbp
New Member

I have the search to list the Admins in Splunk. I need to have it as a saved search or dashboard a non-Admin can save the screen shot. Seems I need like to run the search in elevated privileges. Any ideas?

Tags (1)
0 Karma

somesoni2
Revered Legend

You, as a admin, can setup a summary index OR a lookup table with list of Admin users. That way you can make it available to non-admin users (by setting proper permissions for the index or for the lookup table). You can use 2nd link from @harishalipaka's comment below for query to get the list.

0 Karma

dcrooks_cbp
New Member

Yes, I have the search. Just wish Splunk had a way a user could run the search as an admin to get all the results. I think we also tried to do a scheduled report and that failed.

0 Karma

somesoni2
Revered Legend

I would suggest you save your scheduled search report into a lookup table (using outputlookup command) OR into a summary index (to an index accessible by all). Then your non-admin users can write a search based off your lookup table (inputlookup command) OR against the summary index.

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Get the T-shirt to Prove You Survived Splunk University Bootcamp

As if Splunk University, in Las Vegas, in-person, with three days of bootcamps and labs weren’t enough, now ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...