Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Can I reduce my common user role configuration stanzas?

$
0
0
I was wondering if there was a clean way that I could reduce my stanzas in authorize.conf? I was hoping that similar to indexes.conf I could really do some cleanup work by taking something like this: [role_infomgmtprd_user] srchIndexesAllowed = app_infomgmtprd srchIndexesDefault = app_infomgmtprd importRoles = user srchJobsQuota = 5 cumulativeSrchJobsQuota = 10 rtsearch = disabled schedule_rtsearch = disabled [role_infomgmtprd_power] srchIndexesAllowed = app_infomgmtprd srchIndexesDefault = app_infomgmtprd importRoles = power srchJobsQuota = 5 cumulativeSrchJobsQuota = 10 rtsearch = disabled schedule_rtsearch = disabled [role_owa_power] srchIndexesAllowed = app_owa srchIndexesDefault = app_owa importRoles = power srchJobsQuota = 5 cumulativeSrchJobsQuota = 10 rtsearch = disabled schedule_rtsearch = disabled [role_owa_user] srchIndexesAllowed = app_owa srchIndexesDefault = app_owa importRoles = user srchJobsQuota = 5 cumulativeSrchJobsQuota = 10 rtsearch = disabled schedule_rtsearch = disabled and turning it into something like this: [role_user] srchJobsQuota = 5 cumulativeSrchJobsQuota = 10 rtsearch = disabled schedule_rtsearch = disabled [role_power] srchJobsQuota = 5 cumulativeSrchJobsQuota = 10 rtsearch = disabled schedule_rtsearch = disabled [role_infomgmtprd_user] srchIndexesAllowed = app_infomgmtprd srchIndexesDefault = app_infomgmtprd importRoles = user [role_infomgmtprd_power] srchIndexesAllowed = app_infomgmtprd srchIndexesDefault = app_infomgmtprd importRoles = power [role_owa_power] srchIndexesAllowed = app_owa srchIndexesDefault = app_owa importRoles = power [role_owa_user] srchIndexesAllowed = app_owa srchIndexesDefault = app_owa importRoles = user But that didn't seem to work.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>