A user with non-admin role can only see own search jobs in "Jobs" page.  in a Splunk document (https://docs.splunk.com/Documentation/Splunk/8.1.1/Search/SupervisejobswiththeJobspage) it mentioned "If you have the Admin role, or a role with an equivalent set of capabilities, you can manage the search jobs run by all users of your Splunk implementation."  Can anybody advise which minimum capabilities are required in order to manage (actually just need to read) all users search jobs? Thank you! ... View more

We need a High Availability (HA) Splunk Environment. The ideal architecture would be Distributed Clustered Deployment + SHC - Single Site (C3 / C13), which includes a 2-node Indexer Cluster, 3-node Search Head Cluster, 1 Deployment Server, etc. But, we only have 2 available servers-virtual machine with Win 2012. So, I'm thinking to build a 2-node Windows Server Failover Cluster, then install a Single Splunk Server (S1) (one instance includes Search Head and Indexer) on this cluster. Is this possible? I don't have much experience on Splunk architecture. I did research online, seems no one mentioned this solution. Is this a good idea? any Pros and Cons? Any suggestions are welcome. Thank you! ... View more