Security

REST: I want to restrict a role to only being able to run saved searches (no ad-hoc).

the_wolverine
Champion

Is this possible?

0 Karma

lguinn2
Legend

Don't give the role access to the flashtimeline or other search view. You could do that with permissions.

I am not sure how you would do it with REST, though.

0 Karma
Get Updates on the Splunk Community!

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...