Splunk® Machine Learning Toolkit

User Guide

Acrobat logo Download manual as PDF

This documentation does not apply to the most recent version of MLApp. Click here for the latest version.
Acrobat logo Download topic as PDF

Configure permissions for ML-SPL commands

You can configure permissions to restrict access to ML-SPL commands. Restricting access can help you limit fit and apply command resource utilization to only those users who require the commands.

You can change ML-SPL command permissions in Splunk Web or in default.meta.conf.

Change permissions in Splunk Web

  1. In Splunk Web, select Settings > Advanced search.
  2. Click Search commands.
  3. Under the Sharing column for the search command, click Permissions.
  4. In the Permissions view, specify:
    1. Whether the command appears in the current app or all apps.
    2. Which roles have read and write access to the command.
  5. Click Save.

Change permissions in default.meta.conf

To change permissions, edit the default.meta.conf file in $SPLUNK_HOME/etc/apps/Splunk_ML_Toolkit/metadata/.

This example shows the default access for commands.conf and access permissions for the fit command. In this case, running fit is restricted to users with the admin role.

access = read : [ * ], write : [ admin ]
export = system

access = read : [ admin ], write : [ admin ]

Additional information

For more details on configuring user access to search commands, see the following topics in the Search Manual:

Last modified on 29 September, 2018
Search commands for machine learning
Configure the fit and apply commands

This documentation applies to the following versions of Splunk® Machine Learning Toolkit: 2.3.0, 2.4.0, 3.0.0, 3.1.0, 3.2.0, 3.3.0, 3.4.0, 4.0.0, 4.1.0, 4.2.0, 4.3.0

Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters