Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

BEWARE: srchFilter usage may negate each other in certain situation.

$
0
0
If you are using deny (NOT) in your srchFilter be aware that inheritance of multiple roles with negative filters will negate each other. For example: role1: srchFilter = NOT abc role2: srchFilter = NOT xyz inherited/combined: srchFilter = (NOT abc) OR (NOT xyz) outcome = access to all. Anyone have a workaround for this?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>