Security

User account dedup doesn't work

arrowecssupport
Communicator

Why when i used dedup, in a search for a user account does it return no results. Where the exactly same search for an admin account works.

It works for the users until i add the dedup into it. Very odd.

Tags (1)
0 Karma
1 Solution

arrowecssupport
Communicator

It appeared that in my dedup i was using a "tag" that the user group didn't have permissions to view.

View solution in original post

0 Karma

arrowecssupport
Communicator

It appeared that in my dedup i was using a "tag" that the user group didn't have permissions to view.

0 Karma

lguinn2
Legend

It would be helpful to see the actual command.

0 Karma

arrowecssupport
Communicator

Hi thanks for the response. I fixed it an posted my own answer below.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Rounding off the Splunk Dashboard Contest

What does a contest-winning Splunk dashboard look like? In this case, it isn't in a browser tab at all. It ...

A Four Part Event Series: AI + Observability: AI Agents, LLMs, Apps, & Infrastructure

AI + Observability: AI Agents, LLMs, Apps, & Infrastructure The rapid evolution of artificial intelligence ...