Security

Since splunk 6.4 some users do not see the "export" button anymore

yannK
Splunk Employee
Splunk Employee

I noticed that after upgrading to splunk 6.4, my user with a custom role cannot see the "export" button on the bottom of dashboards , or on the top of search results. While my admin see it.

Tags (4)
1 Solution

yannK
Splunk Employee
Splunk Employee

Figured that out
Those users were member of the custom role "interns".
and it does not inherit from other roles

And the role does not have the capability "export_results_is_visible"
When we compare in the authorize.conf defaults, this capability didn't exist prior to splunk 6.4.* .
and the setting is allowed by default to the role "user".

To allow the export, I updated my custom role to add the capability.

View solution in original post

yannK
Splunk Employee
Splunk Employee

Figured that out
Those users were member of the custom role "interns".
and it does not inherit from other roles

And the role does not have the capability "export_results_is_visible"
When we compare in the authorize.conf defaults, this capability didn't exist prior to splunk 6.4.* .
and the setting is allowed by default to the role "user".

To allow the export, I updated my custom role to add the capability.

surekhasplunk
Communicator

Hi @yannK,

I have a similar issue. I have "export_results_is_visible" capability getting imported well from another user role to my user role.
But still am not able to see export to pdf button in my dashboard page.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...