Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to disable realtime searches for the power user role?

$
0
0
I'm wanting to disable real-time searches for the roles 'user' and power-user'. For the user role, I removed most of the capabilities including `rtsearch`. When I login as a local user account, I do not see the real-time search functionality available which I expect. When I do the same thing for the power-user role, the user still has the real-time functionality. Here's the additional capabilities the power-user has that the regular user does not have edit_sourcetypes embed_report list_settings schedule_search search_process_config_refresh

Viewing all articles
Browse latest Browse all 47296

Latest Images

Trending Articles



Latest Images

<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>