Currently, when any of my users create a saved search, they are private.
How can I alter that to be public?
Also, is there a way to restrict which users have default public and which ones have default private? (e.g. I want admins' searches to be public, but I want regular users' searches to be saved as private)
asked 08 Jul '10, 16:40
In Splunk 4.2, the Saved Search dialog answers your wishes.
You can specify either:
answered 03 Jan '11, 18:41
It would be really useful to be able to set the default permissions (Private/App/All and Everyone Read/Write as examples). This would make creating Dashboards with saved searches a lot less error prone. It is frustrating when someone creates a search that shows up on a dashboard and has not remembered the manual step to make it visible to all.
answered 25 Oct '11, 13:23
To make public go to:
As far as i know there is no way to make the default be public. I think they are always private by default.
answered 08 Jul '10, 16:44