Which default Splunk role could be assigned to provide users with the following capabilities?
Create saved searches -
Edit shared objects and alerts -
Not allowed to create custom roles
Which default Splunk role could be assigned to provide users with the following capabilities?
Create saved searches -
Edit shared objects and alerts -
Not allowed to create custom roles
The 'power' role in Splunk allows users to create saved searches, edit shared objects and alerts, and does not permit them to create custom roles. This fits the requirements stated in the question.
B is correct
Answer is B admin: This role has the most capabilities. power: This role can edit all shared objects and alerts, tag events, and other similar tasks. user: This role can create and edit its own saved searches, run searches, edit preferences, create and edit event types, and other similar tasks.