Splunk Dev

How to make an extracted field from a user account as global field?

akashjohn
Explorer

Hi Team,

I have done a field extraction from a query result and plotted as PIE chart(the dashboard was made as global before creating this particular pie chart) .

When one of my colleague tried to view the pie chart after login with his splunk dashboard credentials it is showing is as no data is available. When I have checked the settings > Fields > Field Extraction we cannot find the field extracted from my user is not showing with the other user.

Could you please let us know how can we make the field extracted by a particular user (here in this case my user) to visible to other users (global field)?

Tags (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

the field proprietary must go in [settings - fields - fields extraction] and then give the correct share properties to the field.
Bye.
Giuseppe

View solution in original post

gcusello
SplunkTrust
SplunkTrust

the field proprietary must go in [settings - fields - fields extraction] and then give the correct share properties to the field.
Bye.
Giuseppe

akashjohn
Explorer

Hi Giuseppe,

The share property is showing as Private and I cannot find any settings button to change the same. Do we need to navigate to some other place to do change the permission?

Thanks,
Akash

0 Karma

gcusello
SplunkTrust
SplunkTrust

Click on Share and then choose App or Global Level granting the Read access to the Role you like or to all roles, but maintaining the write grant to your role.
Bye.
Giuseppe

0 Karma

akashjohn
Explorer

I think I donot have the permission to modify the permission. I will be checking with the Splunk admin team and try.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...

Network to App: Observability Unlocked [May & June Series]

In today’s digital landscape, your environment is no longer confined to the data center. It spans complex ...

SPL2 Deep Dives, AppDynamics Integrations, SAML Made Simple and Much More on Splunk ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...