Splunk Search

How to hide the default 'Search & Reporting' app in Splunk 6?

Roopaul
Explorer

Our team is using Splunk 6. We noticed that when we hide the 'search & Reporting' app for particular roles, it is giving an error for the user while logging in.

Error: Splunk cannot find the "flashtimeline" view. 

When we hide this app, which places should we make sure it is changed? Or, is it a default app in the new version which can't be hidden?

Tags (4)
0 Karma

slr
Communicator

I have the same issue. I solved this problem when I copied the code from the "dashboard" view inside the "Search & Reporting" app and I created a new view with that code inside the app where the Rol/User will land.

This is the code inside "dashboard" view:

<?xml version="1.0"?>
<view template="pages/app.html" type="html" isDashboard="False">
    <label>Dashboards</label>
</view>

I hope this will be usefull.

Regards.

0 Karma

Roopaul
Explorer

We have multiple user roles and we create seperate app based on their needs. So we want to hide this default app for these users as they will have access to other apps which is specially created for them.

0 Karma

MuS
Legend

Like @emiller42 said, if you hide or disable the search app you will end up having default UI components unavailable. One approach for you could be: clone the search app and modify it to your needs and then hide the default search app.

0 Karma

pradeepkumarg
Influencer

You can control what app the user lands on up on login by configuring user-prefs.conf

http://docs.splunk.com/Documentation/Splunk/6.2.4/Admin/User-prefsconf

default_namespace = <app_name>
0 Karma

emiller42
Motivator

Well, it appears to be working, technically. But by hiding the Search app, you're making a bunch of default UI components unavailable to users. (Such at 'flashtimeline')

Can you explain what you're trying to accomplish? There may be a better way to approach it.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...