I log into the web interface using a particular id, and i'm only concerned about a particular index, which is not the default "main" index, right now i have to use "index=xxx" every time i search for something, is there a way to setup my personal web view so that the default searching index for ME is "index=xxx"?
You can assign one or more default indexes to a role. You can find that option in the Splunk Manager under Access controls » Roles.
You can assign one or more default indexes to a role. You can find that option in the Splunk Manager under Access controls » Roles.
Thank you very much for your help!