Working with Apps - Implementing Splunk: Big Data Reporting and Development for Operational Intelligence - page 187

Everything with the value system in the App column ships with Splunk. These items
live in $SPLUNK_HOME/etc/system . We will cover these different configuration types
in Chapter 10 , Configuring Splunk , but the important takeaway is that the Sharing
settings affect nearly everything.
When you create new objects and configurations, it is important to share all
related objects. For instance, in Chapter 6 , Extending Search , we created lookups.
It is important that all three parts of the lookup definition are shared appropriately,
or users will be presented with error messages.
Correcting permission problems
If you see errors about permissions, it is more than likely that some object still
has Sharing set to Private , or is shared at the App level but needs to be Global .
Follow these steps to find the object:
1. Navigate to Manager | All configurations. .
2. Change App context to All .
3. Sort by using the Sharing status. Click twice so that Private objects come
to the top.
4. If there are too many items to look through, filter the list by adding terms to
the search field in the upper-right corner, or changing the App context value.