Security

Order Properties in authorize.conf

amielke
Communicator

Is the Order in a Stanza in the authorize.conf important? Is it possible to change the example from the documantation to

[role_ninja]
rtsearch = enabled
importRoles = user
srchIndexesAllowed = *
srchIndexesDefault = mail;main
srchJobsQuota = 8
rtSrchJobsQuota = 8
srchDiskQuota = 500
srchFilter = host=foo

The "srchFilter" is now at the bottom.

anmie

0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

HI amielke,
I don't find that there are any constraints on the stanzas order in authorize.conf or other .conf files.
Yes, it's possible to change the documentation example, obviously copy file from default folder to local before modifying.
What's your problem?
Bye.
Giuseppe

View solution in original post

gcusello
SplunkTrust
SplunkTrust

HI amielke,
I don't find that there are any constraints on the stanzas order in authorize.conf or other .conf files.
Yes, it's possible to change the documentation example, obviously copy file from default folder to local before modifying.
What's your problem?
Bye.
Giuseppe

amielke
Communicator

the answer sounds good. I will create the stanza automatically and some parts a constant and some dynamically.

thank you

0 Karma
Get Updates on the Splunk Community!

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureThursday, March 27, 2025  |  11AM PST / 2PM EST | Register NowStep boldly ...

Splunk AppDynamics with Cisco Secure Application

Web applications unfortunately present a target rich environment for security vulnerabilities and attacks. ...