Splunk Search

no access to search app = no transpose?

bmgilmore
Path Finder

I've run into this in two systems now, there are other commonalities so I'm not sure if this is a bug or not. If I create a user role, and take away that roles read access to the search app, those users are no longer able to run the transpose search command. I can't find any other commands that will bonk. Will do some additional testing as well but just curious if anyone else has seen this.

Thanks!

Tags (3)
0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

Transpose is implemented as a python custom command in the search app, with global visibility meaning you can use it anywhere as long as you can see it at all. I wouldn't call it a bug, rather a quirk of the configuration hierarchy - as a quick fix you could move the command to a "commands" app that can be used by everyone.

View solution in original post

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Transpose is implemented as a python custom command in the search app, with global visibility meaning you can use it anywhere as long as you can see it at all. I wouldn't call it a bug, rather a quirk of the configuration hierarchy - as a quick fix you could move the command to a "commands" app that can be used by everyone.

0 Karma

bmgilmore
Path Finder

Thanks! Will do!

0 Karma
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!

Review:





Or Learn More in Our Blog >>