Security

Is there any way to restrict users to see data and allow them to view dashboard only

puneethgowda
Communicator

Hi,

Urgent help needed.

Is there any way to restrict users to see data and allow them to view dashboard only

They should not see any raw data except the dashboard which we shared

Regards,

Puneeth

Tags (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

hi puneethgowda

to do this, you have to create drilldown dashboard to grant all the needed accesses to logs to your users, but at the last level of your drilldown dashboards you have to set "No drilldown" in every panel.

In addition you have to disable the "Open in search" button of each panel, inserting the following option in every panel:

<option name="link.visible">false</option>

(for details see http://docs.splunk.com/Documentation/Splunk/latest/Viz/PanelreferenceforSimplifiedXML)

At the same time you have to disable access to the "Search and Reporting" App and to the search dashboards of each App.

If instead you want to limit access to a part of logs, you have to divide your logs into different indexes and grant access to each index to the correct users group.

Bye.
Giuseppe

View solution in original post

0 Karma

puneethgowda
Communicator

Hi cusello thanks a lot we have made the same thing and working great now the new thing is we need to give change password access to the users how do we do this!

0 Karma

gcusello
SplunkTrust
SplunkTrust

hi puneethgowda

to do this, you have to create drilldown dashboard to grant all the needed accesses to logs to your users, but at the last level of your drilldown dashboards you have to set "No drilldown" in every panel.

In addition you have to disable the "Open in search" button of each panel, inserting the following option in every panel:

<option name="link.visible">false</option>

(for details see http://docs.splunk.com/Documentation/Splunk/latest/Viz/PanelreferenceforSimplifiedXML)

At the same time you have to disable access to the "Search and Reporting" App and to the search dashboards of each App.

If instead you want to limit access to a part of logs, you have to divide your logs into different indexes and grant access to each index to the correct users group.

Bye.
Giuseppe

0 Karma

niketn
Legend

@puneethgowda....if you take out the search capability, they might not be able to dashboards also since they internally will be running searches in the same index.

What you can do is disable all drilldowns in the dashboard panels. Edit the navigation > default.xml to remove search link and use hideSplunkBar to give only required menu to the users. (Refer to the following developer documentation on how to create custom Splunk app navigation: http://dev.splunk.com/view/webframework-developapps/SP-CAAAEP9)

You can also restrict user access to specific indexe/s (which is/are being used by the dashboard).

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

puneethgowda
Communicator

Thank you so much i am seeing your answer after i struggle and got the same answer from some other source any way your answer is more clear thank you so much

0 Karma

Masa
Splunk Employee
Splunk Employee

@niketnilay, please use Answer instead of comment field in Question

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...