You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
173 lines
2.5 KiB
173 lines
2.5 KiB
|
|
# Application-level permissions
|
|
|
|
[]
|
|
access = read : [ * ], write : [ admin, power ]
|
|
|
|
### MANAGER
|
|
|
|
[manager]
|
|
access = read : [ * ], write : [ admin ]
|
|
export = system
|
|
|
|
|
|
|
|
|
|
### VIEWS
|
|
|
|
[views/flashtimeline]
|
|
export = system
|
|
|
|
[views/show_source]
|
|
export = system
|
|
|
|
[views/show_source.prod_lite]
|
|
export = system
|
|
|
|
[views/charting]
|
|
export = system
|
|
|
|
[views/report_builder_define_data]
|
|
export = system
|
|
|
|
[views/report_builder_display]
|
|
export = system
|
|
|
|
[views/report_builder_format_report]
|
|
export = system
|
|
|
|
[views/report_builder_print]
|
|
export = system
|
|
|
|
[views/search]
|
|
export = system
|
|
|
|
[views/dashboards]
|
|
export = system
|
|
|
|
[views/alert]
|
|
export = system
|
|
|
|
[views/alerts]
|
|
export = system
|
|
|
|
[views/reports]
|
|
export = system
|
|
|
|
[views/report]
|
|
export = system
|
|
|
|
[views/pivot]
|
|
export = system
|
|
|
|
[views/data_models]
|
|
export = system
|
|
|
|
[views/data_model_explorer]
|
|
export = system
|
|
|
|
[views/data_model_editor]
|
|
export = system
|
|
|
|
[views/data_model_manager]
|
|
export = system
|
|
|
|
[views/field_extractor]
|
|
export = system
|
|
|
|
[views/datasets]
|
|
export = system
|
|
|
|
[views/dataset]
|
|
export = system
|
|
|
|
[views/job_manager]
|
|
export = system
|
|
|
|
[views/orphaned_scheduled_searches]
|
|
access = read : [ admin ], write : [ admin ]
|
|
|
|
[views/integrity_check_of_installed_files]
|
|
access = read : [ admin ], write : [ admin ]
|
|
|
|
[views/job_details_dashboard]
|
|
access = read : [ * ], write : [ admin ]
|
|
|
|
[views/scheduled_export_dashboard]
|
|
access = read : [ * ], write : [ admin ]
|
|
export = system
|
|
|
|
[views/mod_setup]
|
|
export = system
|
|
|
|
[views/table]
|
|
export = system
|
|
|
|
[views/jquery_upgrade]
|
|
access = read : [ admin ], write : [ admin ]
|
|
|
|
### VIEWSTATES: even normal users should be able to create shared viewstates
|
|
|
|
[viewstates]
|
|
access = read : [ * ], write : [ * ]
|
|
export = system
|
|
|
|
### EVENT TYPES
|
|
|
|
[eventtypes]
|
|
export = system
|
|
|
|
|
|
### PROPS
|
|
|
|
[props]
|
|
export = system
|
|
|
|
|
|
### TRANSFORMS
|
|
|
|
[transforms]
|
|
export = system
|
|
|
|
|
|
### TAGS
|
|
|
|
[tags]
|
|
export = system
|
|
|
|
### SAVED SEARCHES
|
|
|
|
[savedsearches/Errors%20in%20the%20last%2024%20hours]
|
|
access = read : [ * ], write : [ admin ]
|
|
|
|
[savedsearches/Errors%20in%20the%20last%20hour]
|
|
access = read : [ * ], write : [ admin ]
|
|
|
|
[savedsearches/Messages%20by%20minute%20last%203%20hours]
|
|
access = read : [ admin ], write : [ admin ]
|
|
|
|
[savedsearches/Splunk%20errors%20last%2024%20hours]
|
|
access = read : [ admin ], write : [ admin ]
|
|
|
|
### Alert Actions
|
|
[alert_actions]
|
|
access = read : [ * ], write : [ admin, power ]
|
|
export = system
|
|
|
|
### COMMANDS
|
|
|
|
[commands]
|
|
access = read : [ * ], write : [ admin ]
|
|
export = system
|
|
|
|
### LOOKUP TABLES
|
|
|
|
[lookups]
|
|
export = system
|
|
|
|
### SEARCH SCRIPTS
|
|
|
|
[searchscripts]
|
|
access = read : [ * ], write : [ admin ]
|
|
export = system
|