Search History

[Poojitha]

Hi,

Can we see queries run by another splunk user for any app  ? Does it require any extra priviledges / roles ? Please let me know.

Regards,
PNV

[gcusello]

Hi @Poojitha,

you need only to access the _audit index for searching.

Ciao.

Giuseppe