QuestionQ5Verified/Creating and Using Workflow ActionsCopy linkReport a problemAsk AstroTutorSave questionWhich capability must a power user have to create a Log Event alert action?Aedit_search_serverBedit_udpCedit_tcpDedit_alertsShow AnswerAnswerExplanationThe edit_alerts capability authorizes a user to create and manage alert definitions and their actions. The TCP and UDP capabilities apply to network inputs, and edit_search_server applies to search-server configuration rather than alert creation.Show comments1Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion