Splunk® Machine Learning Toolkit

User Guide

Download manual as PDF

Download topic as PDF

Configure permissions for ML-SPL commands

You can configure permissions to restrict access to ML-SPL commands. Restricting access can help you limit fit and apply command resource utilization to only those users who require the commands.

You can change ML-SPL command permissions in Splunk Web or in default.meta.conf.

Change permissions in Splunk Web

  1. In Splunk Web, select Settings > Advanced search.
  2. Click Search commands.
  3. Under the Sharing column for the search command, click Permissions.
  4. In the Permissions view, specify:
    1. Whether the command appears in the current app or all apps.
    2. Which roles have read and write access to the command.
  5. Click Save.

Change permissions in default.meta.conf

To change permissions, edit the default.meta.conf file in $SPLUNK_HOME/etc/apps/Splunk_ML_Toolkit/metadata/.

Example
This example shows the default access for commands.conf and access permissions for the fit command. In this case, running fit is restricted to users with the admin role.

[commands]
access = read : [ * ], write : [ admin ]
export = system

[commands/fit]
access = read : [ admin ], write : [ admin ]

Additional information

For more details on configuring user access to search commands, see the following topics in the Search Manual:

PREVIOUS
Search commands for machine learning
  NEXT
Configure the fit and apply commands

This documentation applies to the following versions of Splunk® Machine Learning Toolkit: 2.3.0, 2.4.0, 3.0.0, 3.1.0, 3.2.0, 3.3.0, 3.4.0, 4.0.0, 4.1.0, 4.2.0, 4.3.0


Comments

Thanks for comment @Dhazekamp. I'm looking into this with the Product Managers and will update docs accordingly once I have their feedback.
Cheers!

Elauder splunk, Splunker
July 15, 2019

I don't believe we should be giving guidance to edit default.meta. This is not upgrade safe, nor best practice. Instead, the recommendation should be to place overrides in local.meta...

Dhazekamp splunk, Splunker
July 12, 2019

Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters