Reporting

share saved searches

sureshchinta
Explorer

I've looked at this posting [http://splunk-base.splunk.com/answers/5391/share-a-saved-search-without-admin-rights] but did not help...

We have several scheduled searches (about 70) and they are 'Private' how can they be shared with other users ?

We do not have admin / console access to the server on which Splunk lives.

Thanks in advance.

Tags (1)
0 Karma

sureshchinta
Explorer

Thank you. I could not navigate to the screen you've shown because my permissions shows 'Private' in the sharing column.

If I see the searches defined by other people, I could see the 'Permissions' link under the sharing column.

What needs to be changed in the Splunk configuration to be able to see the 'Permissions' link under the sharing column.

Thanks.

0 Karma

ewoo
Splunk Employee
Splunk Employee

What are the permissions on the app into which you would like to share these saved searches?

When you are logged into Splunk and not seeing a "permissions" link, what kind of user are you logged in as, i.e. what roles is the current user a member of?

0 Karma

mw
Splunk Employee
Splunk Employee

You can change the search permissions in Manager. Set the radio button to "All Apps" and then assign roles read or write permissions as needed

image

Get Updates on the Splunk Community!

Buttercup Games: Further Dashboarding Techniques (Part 4)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

SOC Modernization: How Automation and Splunk SOAR are Shaping the Next-Gen Security ...

Security automation is no longer a luxury but a necessity. Join us to learn how Splunk ES and SOAR empower ...