Users not being able to see specific searches

Path Finder

I have a search that I setup under the splunk admin account and it works, but only under the admin account. Other accounts that have admin access do not see the search run. All of the other searches on the dashboard that I setup work except that one. Thoughts?

0 Karma

Splunk Employee
Splunk Employee

You need to change the permissions on the search. More than likely it's set to 'Private'. As Admin's your other users will be able to see the search via the manager, but in the search or app UI the search will not show up for them. You need to set the permissions for the search for the app you are in or share it globally. Manager --> Searches and Reports --> Permissions

Same goes for field extractions, eventtypes, etc. that you build via the UI.

Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...