Hello there,
I get different results when I run a rest call.
For example I ran a rest command to bring all the dashboards on h1 search head it brings 300 to me and for my colleague it brings 305 on same h1 search head. What may be the problem ?
Also if I get 300 results on SH H1, I see different count on H2 with 310 results.. what is the issue here for this inconsistencies ?
It could be different permissions between the users.
Same search , same time range, same search head and same role.
Please post the rest call and a screenshot of the different results.
| rest splunk_server=local /servicesNS/-/-/data/ui/views | stats count by label, title, eai:appName, author
results for user1: 580
results for user2: 600
same search same role same time and same search head.
Could well be a permissions issue. If I run the search as admin I get 301 results, as a Splunk user I get 282 results.
Do both users have the same permissions?
same search, same role, same permission, same time and same search head.
Thank you