Hi,
When accessing recent runs of searches by link on the form of:
http_//**splunkserver**/sv-SE/app/**appname**/@go?sid=scheduler_**username**_**identifier**-at-**time**
example: user john doe created the scheduled search and the link to get to it is as follows:
http_//splunkserver.se/sv-SE/app/myapp/@go?sid=scheduler_johndoe_YXZhbnphLXN1cnZlaWxsYW5jZQ__RMD5f9dd4cd6d8829f68_at_1447675200_77841
All other users than admin user and the user who scheduled the search are faced with this message following the link:
"**The view you requested could not be found.**"
The access is made within the TTL (since it works for john doe) and i think i have full read rights on all that has tried accessing the search.
I have until now not found an answer to this and i think this appered when upgrading from 6.2.x to 6.3.0 recently.
Thanks in advance!
/Per
↧
Scheduled searches by users not accessible to others. "The view you requested could not be found."
↧