Security

Is there any way to restrict users to see data and allow them to view dashboard only

puneethgowda
Communicator

Hi,

Urgent help needed.

Is there any way to restrict users to see data and allow them to view dashboard only

They should not see any raw data except the dashboard which we shared

Regards,

Puneeth

Tags (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

hi puneethgowda

to do this, you have to create drilldown dashboard to grant all the needed accesses to logs to your users, but at the last level of your drilldown dashboards you have to set "No drilldown" in every panel.

In addition you have to disable the "Open in search" button of each panel, inserting the following option in every panel:

<option name="link.visible">false</option>

(for details see http://docs.splunk.com/Documentation/Splunk/latest/Viz/PanelreferenceforSimplifiedXML)

At the same time you have to disable access to the "Search and Reporting" App and to the search dashboards of each App.

If instead you want to limit access to a part of logs, you have to divide your logs into different indexes and grant access to each index to the correct users group.

Bye.
Giuseppe

View solution in original post

0 Karma

puneethgowda
Communicator

Hi cusello thanks a lot we have made the same thing and working great now the new thing is we need to give change password access to the users how do we do this!

0 Karma

gcusello
SplunkTrust
SplunkTrust

hi puneethgowda

to do this, you have to create drilldown dashboard to grant all the needed accesses to logs to your users, but at the last level of your drilldown dashboards you have to set "No drilldown" in every panel.

In addition you have to disable the "Open in search" button of each panel, inserting the following option in every panel:

<option name="link.visible">false</option>

(for details see http://docs.splunk.com/Documentation/Splunk/latest/Viz/PanelreferenceforSimplifiedXML)

At the same time you have to disable access to the "Search and Reporting" App and to the search dashboards of each App.

If instead you want to limit access to a part of logs, you have to divide your logs into different indexes and grant access to each index to the correct users group.

Bye.
Giuseppe

0 Karma

niketn
Legend

@puneethgowda....if you take out the search capability, they might not be able to dashboards also since they internally will be running searches in the same index.

What you can do is disable all drilldowns in the dashboard panels. Edit the navigation > default.xml to remove search link and use hideSplunkBar to give only required menu to the users. (Refer to the following developer documentation on how to create custom Splunk app navigation: http://dev.splunk.com/view/webframework-developapps/SP-CAAAEP9)

You can also restrict user access to specific indexe/s (which is/are being used by the dashboard).

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

puneethgowda
Communicator

Thank you so much i am seeing your answer after i struggle and got the same answer from some other source any way your answer is more clear thank you so much

0 Karma

Masa
Splunk Employee
Splunk Employee

@niketnilay, please use Answer instead of comment field in Question

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...