- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Splunkers,
We have a unique situation while coming up with a role for power user: we don't want them (power users) to click on Distributed Management Console (DMC or now, it's called Monitoring Console) which is recommended by Splunk to turned off due to high CPU consumption on search heads. The Power users need to have access to provide global permission to share field extractions, lookups, tags etc. I could not find a good way (a specific capability) that keep the global permission to the power user role but deactivate the Monitoring Console access.
Any help to resolve this would be appreciated.
Amit
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

If you click on the app drop down and click managed apps. You will see a list of all the apps you have installed. You will see the Monitoring Console as an app, you can edit the permissions of the app so that the power user role doesn't have read or write permissions.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

If you click on the app drop down and click managed apps. You will see a list of all the apps you have installed. You will see the Monitoring Console as an app, you can edit the permissions of the app so that the power user role doesn't have read or write permissions.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Or disable it entirely.
