Security

Since splunk 6.4 some users do not see the "export" button anymore

yannK
Splunk Employee
Splunk Employee

I noticed that after upgrading to splunk 6.4, my user with a custom role cannot see the "export" button on the bottom of dashboards , or on the top of search results. While my admin see it.

Tags (4)
1 Solution

yannK
Splunk Employee
Splunk Employee

Figured that out
Those users were member of the custom role "interns".
and it does not inherit from other roles

And the role does not have the capability "export_results_is_visible"
When we compare in the authorize.conf defaults, this capability didn't exist prior to splunk 6.4.* .
and the setting is allowed by default to the role "user".

To allow the export, I updated my custom role to add the capability.

View solution in original post

yannK
Splunk Employee
Splunk Employee

Figured that out
Those users were member of the custom role "interns".
and it does not inherit from other roles

And the role does not have the capability "export_results_is_visible"
When we compare in the authorize.conf defaults, this capability didn't exist prior to splunk 6.4.* .
and the setting is allowed by default to the role "user".

To allow the export, I updated my custom role to add the capability.

surekhasplunk
Communicator

Hi @yannK,

I have a similar issue. I have "export_results_is_visible" capability getting imported well from another user role to my user role.
But still am not able to see export to pdf button in my dashboard page.

0 Karma
Get Updates on the Splunk Community!

Splunk Security Content for Threat Detection & Response, Q1 Roundup

Join Principal Threat Researcher, Michael Haag, as he walks through:An introduction to the Splunk Threat ...

Splunk Life | Happy Pride Month!

Happy Pride Month, Splunk Community! 🌈 In the United States, as well as many countries around the ...

SplunkTrust | Where Are They Now - Michael Uschmann

The Background Five years ago, Splunk published several videos showcasing members of the SplunkTrust to share ...