- Splunk Answers
- :
- Using Splunk
- :
- Splunk Search
- :
- Can access restrictions be put on a lookup automat...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Can access restrictions be put on a lookup automatically upon creation?
For example: User A creates a lookup <-- can this lookup be automatically restricted so that User B can not search the contents ?
I know this can be done manually by setting the read permissions (select roles) on the lookup but is there a way to automatically set the permissions to be restrictive upon creation?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
When user upload csv file to splunk by default permission will be private so only user who uploaded file can access this.
For second option, during search time when you create lookup file & if that lookup file does not exist in splunk then default App permission will be applied to that lookup file and shared at app level. As far as I know there are no other automatic ways to achieve this.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
When user upload csv file to splunk by default permission will be private so only user who uploaded file can access this.
For second option, during search time when you create lookup file & if that lookup file does not exist in splunk then default App permission will be applied to that lookup file and shared at app level. As far as I know there are no other automatic ways to achieve this.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Ok thank you very much!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Welcome 🙂
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
As you mentioned that "upon creation", how User A creating lookup For example: Uploading lookup or creating lookup using search query ?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Any ideas for either or both situations would be appreciated! (but I believe the main concern was for when a lookup was created using search query). Thanks!
Introducing the Splunk Community Dashboard Challenge!
Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...
Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...
