Security

Splunk Dashboard is loading for admin and Dashboard Owner not for other Users?

sarvesh_11
Communicator

Splunk Dashboard is loading in usual manner speadily for the Dashboard Owner and Admin user.
While for the viewers dashboard panels are showing "waiting for data".

My Splunk Version is 6.6.0
For the viewer role, i have assigned enough capabilities and roles.
Please suggest me something to get rid of this

TIA

0 Karma
1 Solution

Shan
Builder

Dear @sarvesh_11,

If data loaded by dashboard panels are high then it will be slow. how many panels in your dashboard are there. what is the data volume indexed in each index for every run.
If your using the same index and some portion of the query is also same in all panels. Then you can try something like Basesearch
Please go through the below links.. Hope it helps you in some way.

Thanks..

View solution in original post

0 Karma

Shan
Builder

Dear @sarvesh_11,

If data loaded by dashboard panels are high then it will be slow. how many panels in your dashboard are there. what is the data volume indexed in each index for every run.
If your using the same index and some portion of the query is also same in all panels. Then you can try something like Basesearch
Please go through the below links.. Hope it helps you in some way.

Thanks..

0 Karma

sarvesh_11
Communicator

Thanks @shankarananth for dropping by.
Well yes the dashboard is having many panels, the index name is the common, but source are all different for each panel. We accept the fact it will take time to load the whole dashboard, but our concern is :
Dashboard with all the panels is loading for Admin and dashboard owner users, while at the same time, the normal users the viewers of the dashboard are not getting the panels after waiting for minutes(3-5) also.

So just want to know is there any prioritization in viewing the dashboard?
Atleast after waiting for minutes the panel should be populated with data, rather than showing "waiting for data" and that too for some panels, in random manner, not particularly for specific panel.

0 Karma

Shan
Builder

@sarvesh_11,

Check the resource utilization by each user. Try to load the dashboard with less number of panels for all the users. Sometime for general user, resource allocation will be very low for running the query. If user reaches the max allocation of resource by running the query then we can get info like "waiting for data".
Is dashboard owner is a power user role holder or normal user role holder. If dashboard owner a power user, there will be lot of resource allocated for him.He can run the dashboard easily. If dashboard owner is a normal user role holder, then check his resource allocation and assign the same to all users. Normally Admin role will have high privileges and resource. so there wont be any issue in loading the dashboard..

Thanks ..

0 Karma

sarvesh_11
Communicator

@shankarananth , well the resource are under control.
I have made some changes in authorize.conf for the role : user
namely :
User-level concurrent search jobs limit,
User-level concurrent real-time search jobs limit,
Role-level concurrent search jobs limit etc.

My viewers are getting the data in all panels. not sure it is permanent solution. but it seems to be working for me.

0 Karma

Shan
Builder

@sarvesh_11,

Good to hear.. Glad to help you. Please upvote any comments which help you.

Happy Splunking

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...