User Guide

Configure permissions for ML-SPL commands

You can configure permissions to restrict access to ML-SPL commands. Restricting access can help you limit fit and apply command resource utilization to only those users who require the commands.

You can change ML-SPL command permissions in Splunk Web or in default.meta.conf.

Change permissions in Splunk Web

1. In Splunk Web, select Settings > Advanced search.
2. Click Search commands.
3. Under the Sharing column for the search command, click Permissions.
4. In the Permissions view, specify:
   1. Whether the command appears in the current app or all apps.
   2. Which roles have read and write access to the command.
5. Click Save.

Change permissions in default.meta.conf

To change permissions, edit the default.meta.conf file in $SPLUNK_HOME/etc/apps/Splunk_ML_Toolkit/metadata/.

Example
This example shows the default access for commands.conf and access permissions for the fit command. In this case, running fit is restricted to users with the admin role.

[commands]
access = read : [ * ], write : [ admin ]
export = system

[commands/fit]
access = read : [ admin ], write : [ admin ]

Additional information

For more details on configuring user access to search commands, see the following topics in the Search Manual:

• Security responsibilities
• Control access to the custom command