Splunk Search

Allow users to add public field extractions

Eldad
Explorer

I would like to allow users to add public field extractions. Currently any field extraction users add are marked private and this property cannot be edited by them (only by the admin).

Thanks for the help.

Tags (1)
0 Karma

RicoSuave
Builder

I believe you have to give your users write permissions to whatever app they are making the field extractions in.

0 Karma

RicoSuave
Builder

click on manager>apps>click on permissions for whatever the app is>select which roles/users have read and/or write access.

0 Karma

Eldad
Explorer

How do I do that?

0 Karma
Get Updates on the Splunk Community!

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...