Security

Is it possible to set up access restrictions to saved search results?

msorenson
Explorer

Is it possible to set up role based access restrictions to saved search results? The only option I see is to remove the jobs link from the applications. Even then a commercial user could follow a results link back to the saved M&G results or get "lucky".

Tags (1)
0 Karma

Simeon
Splunk Employee
Splunk Employee

The saved search should be restricted through the object ACL's. However, if you share a specific link to a search via the "get link to results", you will be able to view those results.

gkanapathy
Splunk Employee
Splunk Employee

In particular, unless you share them, the saved search results will have the same ACL as the original search object they were generated from.

0 Karma
Get Updates on the Splunk Community!

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...