
Configure permissions for ML-SPL commands
You can configure permissions to restrict access to ML-SPL commands. Restricting access can help you limit fit
and apply
command resource utilization to only those users who require the commands.
You can change ML-SPL command permissions in Splunk Web or in default.meta.conf
.
Change permissions in Splunk Web
- In Splunk Web, select Settings > Advanced search.
- Click Search commands.
- Under the Sharing column for the search command, click Permissions.
- In the Permissions view, specify:
- Whether the command appears in the current app or all apps.
- Which roles have read and write access to the command.
- Click Save.
Change permissions in default.meta.conf
To change permissions, edit the default.meta.conf
file in $SPLUNK_HOME/etc/apps/Splunk_ML_Toolkit/metadata/
.
Example
This example shows the default access for commands.conf
and access permissions for the fit
command. In this case, running fit
is restricted to users with the admin role.
[commands] access = read : [ * ], write : [ admin ] export = system [commands/fit] access = read : [ admin ], write : [ admin ]
Additional information
For more details on configuring user access to search commands, see the following topics in the Search Manual:
PREVIOUS Search commands for machine learning |
NEXT Configure the fit and apply commands |
This documentation applies to the following versions of Splunk® Machine Learning Toolkit: 2.3.0, 2.4.0, 3.0.0, 3.1.0, 3.2.0, 3.3.0, 3.4.0, 4.0.0, 4.1.0, 4.2.0, 4.3.0
Comments
I don't believe we should be giving guidance to edit default.meta. This is not upgrade safe, nor best practice. Instead, the recommendation should be to place overrides in local.meta...
Thanks for comment @Dhazekamp. I'm looking into this with the Product Managers and will update docs accordingly once I have their feedback.
Cheers!