|
When a user is in multiple Splunk roles (possibly because they are assigned to multiple LDAP/AD groups that are mapped to Splunk roles), what search filter is applied to that user's searches? Is one just selected, and if so which one? Or are all the filters Is there some way to select or specify one, or define a precedence? Or some way to define an overriding filter for a particular user or set of users? |
One Answer:
|
All filters are |
