I need to disable all apps but the default app for a user or role but I cannot figure out how to do it. Either making the apps not accessible (but still selectible) or removing the "Apps" menu/dropdown altogether would be acceptible. Right now my default.xml looks like this:
<nav>
<view name="limitedsearch" default="true"/>
</nav>
and my limitedsearch.xml looks like this:
<view template="dashboard.html" onunloadCancelJobs="True">
<label>Vendor-limited Search
<module name="AccountBar" layoutPanel="appHeader"/>
<!-- Message Popups to tell you what's going on -->
<module name="Message" layoutPanel="messaging">
<param name="filter">*
<param name="clearOnJobDispatch">False
<param name="maxSize">1
</module>
<module name="TitleBar" layoutPanel="navigationHeader">
<param name="showActionsMenu">False
</module>
<module name="SearchBar" layoutPanel="mainSearchControls">
<param name="useAssistant">true
<param name="useTypeahead">true
<module name="TimeRangePicker">
<param name="selected">Last 15 minutes
<module name="ViewRedirector">
<param name="viewTarget">flashtimeline
</module>
</module>
</module>
</view>
The Splunk Admin can set permissions on the apps by role. So you will need to edit each app, giving READ permission to only the appropriate role(s). Users will not see an app in the menu unless they have permission to access it.
The Splunk Admin can set permissions on the apps by role. So you will need to edit each app, giving READ permission to only the appropriate role(s). Users will not see an app in the menu unless they have permission to access it.