Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

search result issue by users

$
0
0
Same SPL result is different by user A and admin SPL-> index=xxx when I do search with userA's userid "interesting fields" when searching with userA's ID and the results when searching with admin are different so I was create new userID -> userB and assigned same role as userA userB's search result is exactly the same result as admin how to fix userA's search result problem? ![alt text][1] admin result ![alt text][2] UserA result I was look up field1 value. field1 is dst_ip [1]: /storage/temp/274602-adminresult.png [2]: /storage/temp/274603-useraresult.png

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>