Hi Everyone,
My case is:
I have my splunk in this structure:
/data/splunk/hotwarm (all logs, from all hosts, stay in this dir)
/data/splunk/cold
/data/splunk/frozen
How can I block some users to see logs from specific hosts? Or, how can I choose what hosts (all logs from that host) a specific user can see (search logs)?
Thanks,
... View more