Reporting

share saved searches

sureshchinta
Explorer

I've looked at this posting [http://splunk-base.splunk.com/answers/5391/share-a-saved-search-without-admin-rights] but did not help...

We have several scheduled searches (about 70) and they are 'Private' how can they be shared with other users ?

We do not have admin / console access to the server on which Splunk lives.

Thanks in advance.

Tags (1)
0 Karma

sureshchinta
Explorer

Thank you. I could not navigate to the screen you've shown because my permissions shows 'Private' in the sharing column.

If I see the searches defined by other people, I could see the 'Permissions' link under the sharing column.

What needs to be changed in the Splunk configuration to be able to see the 'Permissions' link under the sharing column.

Thanks.

0 Karma

ewoo
Splunk Employee
Splunk Employee

What are the permissions on the app into which you would like to share these saved searches?

When you are logged into Splunk and not seeing a "permissions" link, what kind of user are you logged in as, i.e. what roles is the current user a member of?

0 Karma

mw
Splunk Employee
Splunk Employee

You can change the search permissions in Manager. Set the radio button to "All Apps" and then assign roles read or write permissions as needed

image

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...