Security

Order Properties in authorize.conf

amielke
Communicator

Is the Order in a Stanza in the authorize.conf important? Is it possible to change the example from the documantation to

[role_ninja]
rtsearch = enabled
importRoles = user
srchIndexesAllowed = *
srchIndexesDefault = mail;main
srchJobsQuota = 8
rtSrchJobsQuota = 8
srchDiskQuota = 500
srchFilter = host=foo

The "srchFilter" is now at the bottom.

anmie

0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

HI amielke,
I don't find that there are any constraints on the stanzas order in authorize.conf or other .conf files.
Yes, it's possible to change the documentation example, obviously copy file from default folder to local before modifying.
What's your problem?
Bye.
Giuseppe

View solution in original post

gcusello
SplunkTrust
SplunkTrust

HI amielke,
I don't find that there are any constraints on the stanzas order in authorize.conf or other .conf files.
Yes, it's possible to change the documentation example, obviously copy file from default folder to local before modifying.
What's your problem?
Bye.
Giuseppe

amielke
Communicator

the answer sounds good. I will create the stanza automatically and some parts a constant and some dynamically.

thank you

0 Karma
Get Updates on the Splunk Community!

Learn Splunk Insider Insights, Do More With Gen AI, & Find 20+ New Use Cases You Can ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Buttercup Games: Further Dashboarding Techniques (Part 7)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...