Splunk Troubleshooting Use Case - 17

14.06.24 07:00 PM - By Murugan

Issue: Query is not working for a particular users, but for others
Root Cause: Users missing access to the extracted field (e.g: in this case, the startup_code field is extracted using props)
Solution: Enable access to the respective users & validate it again with users

Murugan