Reporting

Users not being able to see specific searches

bshuford
Path Finder

I have a search that I setup under the splunk admin account and it works, but only under the admin account. Other accounts that have admin access do not see the search run. All of the other searches on the dashboard that I setup work except that one. Thoughts?

0 Karma

dskillman
Splunk Employee
Splunk Employee

You need to change the permissions on the search. More than likely it's set to 'Private'. As Admin's your other users will be able to see the search via the manager, but in the search or app UI the search will not show up for them. You need to set the permissions for the search for the app you are in or share it globally. Manager --> Searches and Reports --> Permissions

Same goes for field extractions, eventtypes, etc. that you build via the UI.

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...