Correcting permission problems

If you see errors about permissions, it is more than likely that some object still has Sharing set to Private, or is shared at the App level but needs to be Global.

A common point of confusion is when an app is created within the Splunk search app, but with the expectation that they will be visible within another app.

Follow these steps to find the object:

  1. Navigate to Settings | All configurations.
  2. Change App context to All.
  3. Sort by using the Sharing status. Click twice so that Private objects come to the top.
  4. If there are too many items to look through, filter the list by adding terms to the search field in the upper-right corner, or changing the App context value.
  5. Fix the permissions appropriately. In most ...

Get Implementing Splunk 7 - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.