Security

REST: I want to restrict a role to only being able to run saved searches (no ad-hoc).

the_wolverine
Champion

Is this possible?

0 Karma

lguinn2
Legend

Don't give the role access to the flashtimeline or other search view. You could do that with permissions.

I am not sure how you would do it with REST, though.

0 Karma
Get Updates on the Splunk Community!

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Combine Multiline Logs into a Single Event with SOCK: a Step-by-Step Guide for ...

Combine multiline logs into a single event with SOCK - a step-by-step guide for newbies Olga Malita The ...