Splunk Enterprise

Removing write access of admin for few of the reports and alerts

vikashperiwal
Path Finder

Hi Team,

 

As part of audit question - can we remove the admin write role from few of reports and alerts...we don't want any one to do change including admin..how can we achieve this from configuration end? And also want to remove clone option from UI to all reports and alerts from configuration

Labels (2)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

I don’t think that you can remove that capability from admin. 
Maybe this https://community.splunk.com/t5/Dashboards-Visualizations/Hide-quot-Create-New-Dashboard-quot-Button... helps you on your second item?

r. Ismo

0 Karma

vikashperiwal
Path Finder

For reports and alerts, how to hide the clone button....when we to report and alerts we see all the reprt along that action field under that we see clone...I want to hide that /or not show...from which conf file we can achive..?

Default.meta I did not find option

0 Karma
Get Updates on the Splunk Community!

Database Performance Sidebar Panel Now on APM Database Query Performance & Service ...

We’ve streamlined the troubleshooting experience for database-related service issues by adding a database ...

IM Landing Page Filter - Now Available

We’ve added the capability for you to filter across the summary details on the main Infrastructure Monitoring ...

Dynamic Links from Alerts to IM Navigators - New in Observability Cloud

Splunk continues to improve the troubleshooting experience in Observability Cloud with this latest enhancement ...