-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathPermisison
More file actions
6 lines (4 loc) · 903 Bytes
/
Permisison
File metadata and controls
6 lines (4 loc) · 903 Bytes
1
2
3
4
5
6
Who has what role
| rest /services/authentication/users splunk_server=local | table title roles | rename title as user |dedup user| rename roles as title | mvexpand title | join type=left max=0 title [| rest /services/authorization/roles splunk_server=local | table title srchInd* | eval indexes=mvappend(srchIndexesAllowed,srchIndexesDefault) | table title indexes | mvexpand indexes | dedup title indexes | eval indexes_orig=indexes | join indexes max=0 type=left [| rest /services/data/indexes | stats count by title | table title| eval indexes=if(match(title,"^_"),"_*","*") | rename title as indexes_new]| eval indexes=if(indexes_orig!=indexes_new,indexes_new, indexes_orig) | table title indexes] |dedup user
What roles has what permission in Index
| rest /services/authorization/roles splunk_server=local | table title srchInd* | eval indexes=mvappend(srchIndexesAllowed,srchIndexesDefault)