Hi all,
Am unable to provide a user with access to 'Alert Actions' under Splunk setting for the user to view the 'Log Events' related to the custom alerts created.
As I cannot confirm the exact capability which can give access for the same.
Can somebody please help.
I am using the splunk version 7.2.9
Thanks
Hi Harshal, I don't know if this response is needed anymore, but from my experience, I noticed that the only capability that grants this view is the "admin_all_objects".
A similar thread can be found here confirming this: https://community.splunk.com/t5/All-Apps-and-Add-ons/What-roles-or-capabilities-are-needed-that-Aler...