About pranavna

pranavna · ‎04-12-2019

when you create an index every one has access to that index by default. I have not added mapping of any sort. IDK, if i am able to convey what i want. basically, if we create an index , any data there should be visible to only 1 team/role.

pranavna · ‎04-11-2019

again, We have nearly 130 indexes we can not add the capabilities to rest of the users. having role_sensitive_data we can not restrict others to not use it.

pranavna · ‎04-10-2019

I want to create an index which will have sensitive data and want it to be accessible by only admin team and security team. basically exactly opposite of https://answers.splunk.com/answers/301280/how-to-restrict-access-to-one-certain-index-withou.html I don't want to add search filter for each and every role as we have 100 roles and its a maintenance nightmare. is there any elegant way to do this?

pranavna · ‎04-27-2018

that fixed my issue. thanks...

Posts	4
Solutions	0
Karma Given	19
Karma Received	0
Member Since	‎06-03-2017

Online Status	Offline
Date Last Visited	‎09-08-2022 06:14 PM

creating an index accessible to only one Splunk ro...

Re: creating an index accessible to only one Splun...

Re: creating an index accessible to only one Splun...

creating an index accessible to only one Splunk ro...

Re: Why am I getting "homePath='/opt/splunk/var/li...