Hi,
i wish to provide a Splunk application to our customers. But I do not want to provide them with 'search' capabilities.
I have tried removing permissions for search & Reporting, but then I also lose 'Dashboards' and 'Reporting' capabilities.
Also, removing the 'search' from the User interface of the application does not solve the issue, as the users can get to search by right-clicking any result.
any recommendations on how to address this issue?
thanks in advance
This may be more work than you want to do but you could embed the dashboards or reports in a separate web page that is hosted by you and instead of providing them access to Splunk you would give them access to your custom web app. That way they can only view the data but not have permission to interact with splunk.