I'd like to ensure that all users on my search head are forced to include a specific field (along with a specific value) whenever they are employing a certain command in an SPL query. The particular field I want them to always use is listed as an "optional" argument in the command's SPL docs--basically, I want to make this field required and prevent users from giving this field any value that is different from the one I specify.
For example: I'd like to modify head
so that a user always has to use limit=50
whenever they invoke this command. Currently, limit
is listed as an "optional" head
argument--I want to make it required AND prevent users from giving limit
any value besides 50.
I'm thinking there might be something I can add to commands.conf
to achieve this but am not sure. Any suggestions?