×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
aab1
Explorer
Member since: ‎04-08-2021
‎09-09-2024
Community Statistics
Posts 5
Solutions 0
Karma Given 2
Karma Received 0
Member Since ‎04-08-2021
Activity Feed
View All

Re: Isolate a Search head - search head user accou...

by in Splunk Search
‎09-09-2024 12:26 AM
‎09-09-2024 12:26 AM
Hi again Thank you very much clarification 🙂 /Best Rgds ... View more

Re: Isolate a Search head - search head user accou...

by in Splunk Search
‎09-08-2024 11:37 PM
‎09-08-2024 11:37 PM
Morning Giuseppe  Thanks for a quick reply. My problem with this solution is that I somehow need to ensure that 1 The Full Splunk admin can't login the SH (since the SH is managed by 3 party including custom TA's) 2 The 3 party managed SH must not be able to alter the roles (so no access to the Full Admin) Hence the need for a isolated setup where the roles are set on the Peer site.   ... View more

Isolate a Search head - search head user account

by in Splunk Search
‎09-08-2024 11:04 PM
‎09-08-2024 11:04 PM
Hi  I found this 2011 chat "72798" on Splunk to "considering adding the concept of an "search head user account" on the indexer to allow the indexer administrator to restrict what the search head can do" Do anybody know if this is somehow available or doable in 2024? My case is that I need a Standalone Searchhead with access to a subset of all indexes in the Cluster. But at the same time full control of the Searchhead (Splunk Admin capabilities except changes to the searchable index list)  The aim is to separate the SH to be managed by a 3 party. ... View more

Re: Can not run the iniotial spencore.sh - same is...

by in Installation
‎01-24-2024 06:24 AM
‎01-24-2024 06:24 AM
Hi - and thanks a lot - I will try focusing on that part and investigate further ... View more

Can not run the iniotial spencore.sh - same issue ...

by in Installation
‎01-23-2024 02:21 AM
‎01-23-2024 02:21 AM
Hi - I get the same problem running splencore.sh - after exporting path, setting permit on cert Server is CENTOS 8 STREAM  Can this be related to error in CERT - or missing firewall opening from my Splunk HF?  [root@hostname bin]# ./splencore.sh test Traceback (most recent call last): File "./estreamer/preflight.py", line 33, in <module> import estreamer.crossprocesslogging File "/opt/splunk/etc/apps/TA-eStreamer/bin/encore/estreamer/__init__.py", line 31, in <module> from estreamer.diagnostics import Diagnostics File "/opt/splunk/etc/apps/TA-eStreamer/bin/encore/estreamer/diagnostics.py", line 43, in <module> import estreamer.pipeline File "/opt/splunk/etc/apps/TA-eStreamer/bin/encore/estreamer/pipeline.py", line 29, in <module> from estreamer.metadata import View ModuleNotFoundError: No module named 'estreamer.metadata' ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎09-09-2024 02:19 AM
Karma given to
View All