Users not being able to see specific searches

Path Finder

I have a search that I setup under the splunk admin account and it works, but only under the admin account. Other accounts that have admin access do not see the search run. All of the other searches on the dashboard that I setup work except that one. Thoughts?

0 Karma

Splunk Employee
Splunk Employee

You need to change the permissions on the search. More than likely it's set to 'Private'. As Admin's your other users will be able to see the search via the manager, but in the search or app UI the search will not show up for them. You need to set the permissions for the search for the app you are in or share it globally. Manager --> Searches and Reports --> Permissions

Same goes for field extractions, eventtypes, etc. that you build via the UI.

Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...