Hi, is it possible to organize users by functional area for example : Security, IT, NetOps,....
In these areas, each team might monitor specific metrics related to their functional area, or they might monitor a general set of metrics for the specific systems they manage, or both.
Hi
this is possible and I suppose that quite often used way.
Here is one conf presentation about RBAC which could help you https://conf.splunk.com/watch/conf-online.html?search=Pla1169b&search.event=conf23#/
r. Ismo