topic Re: Splunk dashboard user session never expires in Splunk Enterprise Security

Splunk dashboard user session never expires

cyber_castle — Tue, 29 Sep 2020 21:51:09 GMT

Hello guys,

We are using SH Clustering with Eneterprise SEcurity with F5 Load balancer. We have a requirement from our SOC team to display the dashboard on the TV - 24/7 so that they can monitor it continuously. Our users are connected through LDAP. I am aware off the setting - ui_inactivity_timeout in web.conf to zero so that it will never expires.

We want to create only for one generic_user (soc_anaylsts) which is in the AD.
If we have to create the user locally in the SH, will it work as we have a Load balancer and as far as i know, it will create only on one SH not on all.

Pls help

Re: Splunk dashboard user session never expires

sir_lamneth — Thu, 01 Nov 2018 18:03:54 GMT

If you want to create a non-LDAP user, then you can do this in a Cluster. If you follow these instructions, then it will get replicated across the Cluster:

https://docs.splunk.com/Documentation/Splunk/7.2.0/DistSearch/AdduserstotheSHC

Another option is to embed the Report or Dashboard within another site.

https://docs.splunk.com/Documentation/Splunk/latest/Report/Embedscheduledreports

https://answers.splunk.com/answers/153158/feature-request-how-to-embed-a-dashboard-not-a-rep.html

Re: Splunk dashboard user session never expires

Rob2520 — Thu, 01 Nov 2018 20:37:36 GMT

This would help https://answers.splunk.com/answers/7233/user-specific-browser-session-timeout.html

https://docs.splunk.com/Documentation/Splunk/7.1.1/Admin/Configureusertimeouts

Re: Splunk dashboard user session never expires

cyber_castle — Wed, 07 Nov 2018 16:15:21 GMT

I have tried that script, for some reason its not working for me. May be is it because, it may have written for an older version of browser/splunk version?

Re: Splunk dashboard user session never expires

cyber_castle — Wed, 07 Nov 2018 16:20:47 GMT

@sir_lamneth - thanks for EmbedScheduledreports. Let me test this in our environment and will let you know.