Search commands for machine learning permissions

Access to machine learning search commands (ML-SPL) is permission based. You can configure permissions to restrict access to these search commands. Restricting access can help you limit fit and apply command resource utilization to only those users who require the commands.

Follow these steps to change machine learning search command access:

  1. In the Splunk platform, select Settings > Advanced search.
  2. Click Search commands.
  3. Under the Sharing column for the search command, click Permissions.
  4. In the Permissions view, specify:
    1. Whether the command appears in the current app or all apps.
    2. Which roles have read and write access to the command.
  5. Click Save.