Security

How to allow global permission for a user without enabling access to the Monitoring Console?

ash2l
Path Finder

Splunkers,

We have a unique situation while coming up with a role for power user: we don't want them (power users) to click on Distributed Management Console (DMC or now, it's called Monitoring Console) which is recommended by Splunk to turned off due to high CPU consumption on search heads. The Power users need to have access to provide global permission to share field extractions, lookups, tags etc. I could not find a good way (a specific capability) that keep the global permission to the power user role but deactivate the Monitoring Console access.

Any help to resolve this would be appreciated.

Amit

0 Karma
1 Solution

kmccririe_splun
Splunk Employee
Splunk Employee

If you click on the app drop down and click managed apps. You will see a list of all the apps you have installed. You will see the Monitoring Console as an app, you can edit the permissions of the app so that the power user role doesn't have read or write permissions.

View solution in original post

kmccririe_splun
Splunk Employee
Splunk Employee

If you click on the app drop down and click managed apps. You will see a list of all the apps you have installed. You will see the Monitoring Console as an app, you can edit the permissions of the app so that the power user role doesn't have read or write permissions.

woodcock
Esteemed Legend

Or disable it entirely.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI! Discover how Splunk’s agentic AI ...

[Puzzles] Solve, Learn, Repeat: Dereferencing XML to Fixed-length events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Stay Connected: Your Guide to December Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...