|
I have a user that wants to schedule a search and cannot. I set up a test user and tried and can't do it either. |
|
The ability to schedule searches is controlled through the capabilities assigned to your role. By default the user role does not posses the schedule_search capability. If you want this specific user to be able to schedule searches you will need to add him to a role that has the capability enabled. More information on roles and capabilities can be found here: http://www.splunk.com/base/Documentation/latest/Admin/Addusersandassignroles If the user already belongs to a role that has the capability enabled and is unable to schedule searches you probably want to contact Splunk Support with a diag and a screenshot of what your user sees |