All Apps and Add-ons

Restrict to update Splunk App

AKG1_old1
Builder

Hi,

I am looking for possibilities of restricting splunk app to be modified.

I have developed a Splunk App and planning to deploy it on another server. I want to restrict this app to be modified, even by Admin on new server.

Or atleast restrict to modify dashboards.

Thanks
Ankit

lycollicott
Motivator

Set the permissions on the app to read only from the manage apps screen. Don't try to lock out your admin. You might need them to help and you don't want to insult them by trying to lock them out.

0 Karma

AKG1_old1
Builder

Thanks for reply.

By changing permission it wont restrict users to update, it just restrict for sharing. even though if it works they can easily change permission back.

"Users with read access can only save objects for themselves, and require write access to be able to share objects with other users."

0 Karma

lycollicott
Motivator

What exactly don't you want changed? If a user wants to customize a dashboard or search for themselves then that is a pretty routine and acceptable thing.

0 Karma

goyals05
Explorer

I don't want to let them change dashboards.

0 Karma

lycollicott
Motivator

They can't edit a dashboard if they only have read permissions. They can clone it for themselves, but they cannot edit the original.

0 Karma

goyals05
Explorer

But they have admin privilege they can change permission back.

Let me clear my requirement bit more.

  1. we have developed one app and providing this app to some other group. They will install on their server. I don't have authority to change anything on their server.

we have spend plenty of time to develop dashboards on that app and don't want they will change or use some other way. so looking for possibilities to add some restriction before giving to them.

0 Karma

lycollicott
Motivator

I do not think that is possible. For starters, you will be supplying them with XML code that they can just change and secondly every system has admins and the very nature of being an admin means you can do everything.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...