Splunk for Tibco BusinessWorks Engine: Can we assign access to application logs to individual developers based on ownership of an application?

[premdutt]

Hi

can we assign access to application logs based on owners of an application instead of allowing all users to search and view sensitive data from application logs?

thank you
Premdutt Gaur

[martin_mueller]

Access control is based on indexes or search filters set for Splunk roles: http://docs.splunk.com/Documentation/Splunk/6.2.4/Security/Addandeditroles

[sideview]

This is absolutely right - there are very fine grained role-based access controls in the Splunk framework. It's not in the app layer itself, but this hasn't been necessary because the Splunk framework itself does an admirable job allowing it to be administered via the UI and integrated with AD/LDAP etc.