Splunk Search
Highlighted

user rights/capacities/permissions necessary for tstats and metadata commands

Builder

Hello,

does tstats require read access to indexes? same question for metadata?

The goal is to provide statistics from indexes without giving access to data (for monitoring by instance)

Thanks.

Splunk Enterprise V7.1.4

0 Karma