Security

Order Properties in authorize.conf

amielke
Communicator

Is the Order in a Stanza in the authorize.conf important? Is it possible to change the example from the documantation to

[role_ninja]
rtsearch = enabled
importRoles = user
srchIndexesAllowed = *
srchIndexesDefault = mail;main
srchJobsQuota = 8
rtSrchJobsQuota = 8
srchDiskQuota = 500
srchFilter = host=foo

The "srchFilter" is now at the bottom.

anmie

0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

HI amielke,
I don't find that there are any constraints on the stanzas order in authorize.conf or other .conf files.
Yes, it's possible to change the documentation example, obviously copy file from default folder to local before modifying.
What's your problem?
Bye.
Giuseppe

View solution in original post

gcusello
SplunkTrust
SplunkTrust

HI amielke,
I don't find that there are any constraints on the stanzas order in authorize.conf or other .conf files.
Yes, it's possible to change the documentation example, obviously copy file from default folder to local before modifying.
What's your problem?
Bye.
Giuseppe

amielke
Communicator

the answer sounds good. I will create the stanza automatically and some parts a constant and some dynamically.

thank you

0 Karma
Get Updates on the Splunk Community!

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Combine Multiline Logs into a Single Event with SOCK: a Step-by-Step Guide for ...

Combine multiline logs into a single event with SOCK - a step-by-step guide for newbies Olga Malita The ...