Users not being able to see specific searches

Path Finder

I have a search that I setup under the splunk admin account and it works, but only under the admin account. Other accounts that have admin access do not see the search run. All of the other searches on the dashboard that I setup work except that one. Thoughts?

0 Karma

Splunk Employee
Splunk Employee

You need to change the permissions on the search. More than likely it's set to 'Private'. As Admin's your other users will be able to see the search via the manager, but in the search or app UI the search will not show up for them. You need to set the permissions for the search for the app you are in or share it globally. Manager --> Searches and Reports --> Permissions

Same goes for field extractions, eventtypes, etc. that you build via the UI.

Get Updates on the Splunk Community!

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...

Introducing Splunk Enterprise 9.2

WATCH HERE! Watch this Tech Talk to learn about the latest features and enhancements shipped in the new Splunk ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...