List of views and roles permitted to the view


I need to make a report/alert on the permissions granted to the views in SPLUNK.

I am in particular interested in those situations where permission = read is granted to 'everyone'

Is it possible to make such a report?

Tags (3)


when you create reports/alert then there is an option "permissions" and you can assign can give read permission to everyone.

0 Karma


I know that. I want to create a report in SPLUNK which contain a list of all views and the permissions which have been granted to that particular view.

I need this list to make sure that I have granted the correct roles to each view.

0 Karma