I have a user that has asked how to get access/permissions to the "export" button while doing a search in Splunk. It is now showing up for them when they run a search. The first pic has that option highlighted.
Below is a screen shot of a search they ran, without the export/download option:
Is this controlled via role or some other setting?
Hi
based on this https://docs.splunk.com/Documentation/Splunk/8.2.3/Admin/Authorizeconf they are needing
capability::export_results_is_visible
r. Ismo
Hi
based on this https://docs.splunk.com/Documentation/Splunk/8.2.3/Admin/Authorizeconf they are needing
capability::export_results_is_visible
r. Ismo