Secure access for Splunk knowledge objects

As you use , you create a variety of knowledge objects such as event types, tags, lookups, field extractions, workflow actions, and saved searches. Splunk Web lets you restrict and expand access to knowledge objects within your implementation. You can use it to:

• Make an object available to users of all apps.
• Make an object available to users of a particular app.
• Restrict object access by user role.
• Disable or delete objects.
• Allow users to share or delete objects they do not own.

For more information about securing your knowledge objects, see Manage knowledge object permissions and Disable or delete knowledge objects in the Knowledge Manager Manual.