Splunk Search

The permissions are fine, but when I change the App, I cannot search.

A44D
Explorer

There are some keywords that cannot be searched after changing the App.
Even more specific keywords within a specific field are not searchable.
There is no problem with permissions, but do you know anything about it?

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

What did you change in the app?

---
If this reply helps you, Karma would be appreciated.
0 Karma

A44D
Explorer

Thanks for the reply.
App is a newly created App. It is not an existing one.
I did the same search on the App when I created it and on the App after I changed it, but there are some keywords that I cannot search on the App after I changed it.
I don't think it's a permissions issue because I can search for different keywords.

0 Karma

isoutamo
SplunkTrust
SplunkTrust

What was your chance and can you give an example of you working vs non working queries with data?

r. Ismo

0 Karma
Get Updates on the Splunk Community!

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

New Release | Splunk Cloud Platform 10.1.2507

Hello Splunk Community!We are thrilled to announce the General Availability of Splunk Cloud Platform 10.1.2507 ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...