In the [documentation about using summary indexes][1] it says at step 8:> Select a summary index. The default> summary index is named summary. The> list only displays indexes to which> you have permission to write. [...]
It seems the last bit "only displays indexes to which you have permission to write" is a bit off.
Our users see the correct summary index on a random basis: Sometimes they see them, sometimes not. We could not determine what's causing this undeterministic behaviour.
So **how do I configure a role to have permissions to write to a dedicated index?** (obviously without allowing them to write to all other indexes)
Our specs:
- Index cluster on version 7.1.2 (build a0c72a66db66)
- search head cluster on version 7.1.2 (build a0c72a66db66)
- summary indexes are defined on index & search head cluster
[1]: http://docs.splunk.com/Documentation/Splunk/latest/Knowledge/Usesummaryindexing#Set_up_summary_index_searches_in_Splunk_Web
↧