Splunk Search

no access to search app = no transpose?

bmgilmore
Path Finder

I've run into this in two systems now, there are other commonalities so I'm not sure if this is a bug or not. If I create a user role, and take away that roles read access to the search app, those users are no longer able to run the transpose search command. I can't find any other commands that will bonk. Will do some additional testing as well but just curious if anyone else has seen this.

Thanks!

Tags (3)
0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

Transpose is implemented as a python custom command in the search app, with global visibility meaning you can use it anywhere as long as you can see it at all. I wouldn't call it a bug, rather a quirk of the configuration hierarchy - as a quick fix you could move the command to a "commands" app that can be used by everyone.

View solution in original post

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Transpose is implemented as a python custom command in the search app, with global visibility meaning you can use it anywhere as long as you can see it at all. I wouldn't call it a bug, rather a quirk of the configuration hierarchy - as a quick fix you could move the command to a "commands" app that can be used by everyone.

0 Karma

bmgilmore
Path Finder

Thanks! Will do!

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...