Getting Data In

Can we filter warning/error messages by role in Splunk 6.2.2?

philip_wong
Communicator

I saw someone mentioned this is possible from 6.2.2. I want to verify if it's true and if there's any document mentioned this.
http://answers.splunk.com/answers/7960/red-error-warning-bar-in-splunk.html

Furthermore, I hope it can be done per role. For example, admin can see system messages, but general users can only see their own errors.

Is it possible?

0 Karma

jeffland
SplunkTrust
SplunkTrust

I suppose you could get the current user in js with service.currentUser() and the role with properties().roles (see http://dev.splunk.com/view/javascript-sdk/SP-CAAAEJ8#currentuser for more information and example), and based on their role appy

div.Message {
    display:none;
}
0 Karma
Get Updates on the Splunk Community!

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Combine Multiline Logs into a Single Event with SOCK: a Step-by-Step Guide for ...

Combine multiline logs into a single event with SOCK - a step-by-step guide for newbies Olga Malita The ...