Security

What capability is needed for a user to be able to use/read the lookups?

auaave
Communicator

Hi Guys,

I created lookups and dashboards with lookups using an admin role. Now when other users (no admin role) are viewing the dashboards, all reports with lookups are not working. I made sure that the other users have permission to read the lookups (files, definitions and automatic lookups) but it's still not working.

The report will work when I add the "admin_all_objects" capability to those users. However, I cannot let all users to have admin rights to all objects. Is there any other way to fix this?

Thanks!

Get Updates on the Splunk Community!

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...