Hello,
does tstats require read access to indexes? same question for metadata?
The goal is to provide statistics from indexes without giving access to data (for monitoring by instance)
Thanks.
Splunk Enterprise V7.1.4