Reporting

Who should be the owner of my Saved Search and Reports in Splunk?

pradeep96674
New Member

Hi,

I have created reports and dashboard in my Splunk test environment.

Now we have to move our code to Production environment, I have some questions, listing them below:

  1. Who should be the owner of my reports in production?
  2. Where can I set the owner of my reports?
  3. In current Production environment, we are facing issue with the limit for number of concurrent searches for a user, so what should be the limit of user in that case?
  4. Is there a limit of admin users for running the saved searches?
  5. What are the best practices for the user which we should follow when setting as owner for the saved search?

Thanks
Pradeep

0 Karma
1 Solution

ddrillic
Ultra Champion

A cheerful discussion about the subject at - Who do saved scheduled searches run as?

It says -

alt text

View solution in original post

ddrillic
Ultra Champion

A cheerful discussion about the subject at - Who do saved scheduled searches run as?

It says -

alt text

Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...