Hi, using splunk 6.5.2. I have a new user role, and I have set up an App for this role specifically and a default menu which takes them to this app. I need to prevent these users from being able to navigate to the "search and reporting" app, but when I remove permissions to this, they receive an error on their existing dashboards. Also, even though I have given them the capability to change their own password, they receive a permissions error when trying to use account settings. Thanks in advance. ... View more

I can obtain a list of fields within an index eg. index=bind_queries | stats values(*) AS * | transpose | table column | rename column AS Fieldnames and a list of all indexes, | eventcount summarize=false index=* index=_* | dedup index But I'm struggling to successfully join the two. Anyone know of a solution? ... View more