Splunk Search

How to generate a search to find dashboards so that we can export the result

kteng2024
Path Finder

Hi,

Is there any search to find the all the dashboards along with usernames, email id, and when it was created. I know that we can see in "search&reporting" -> dashboards which will give dashboards name and users. But i would like to export it

adonio
Ultra Champion

here is a little query that might help:

| rest /servicesNS/-/-/data/ui/views | search isDashboard=1 | table title eai:acl.app eai:userName

not sure how to find the time a dashboard created.
you can add a search (or append one) that ties email to the user field for example
hope it helps

kteng2024
Path Finder

any way to filter the owner = nobody as i am looking for the dasboards which are not having username not nobody

0 Karma

adonio
Ultra Champion

| rest /servicesNS/-/-/data/ui/views | search isDashboard=1 NOT eai:userName=nobody | table title eai:acl.app eai:userName

0 Karma

woodcock
Esteemed Legend

Like this:

|rest/servicesNS/-/-/data/ui/views | fields title label eai:data updated eai:acl.owner | rename eai:data AS XML | outputcsv YourFileNameHere
Get Updates on the Splunk Community!

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...