I need to make a report/alert on the permissions granted to the views in SPLUNK.
I am in particular interested in those situations where permission = read is granted to 'everyone'
Is it possible to make such a report?
when you create reports/alert then there is an option "permissions" and you can assign can give read permission to everyone.
I know that. I want to create a report in SPLUNK which contain a list of all views and the permissions which have been granted to that particular view.
I need this list to make sure that I have granted the correct roles to each view.