All Apps and Add-ons

custom app & data from other app

ccsfdave
Builder

Greetings,

I would like to create custom apps and grant roles access to the new apps however, I would like them to access data from other apps without giving access to those apps.

Let me make it more concrete: I have created an app - let's call it internal app. In this internal app, I would like to create dashboards using data from the Palo Alto app and source types. I would like to grant users access to the internal app but not the Palo Alto. I have the user role accessing the Palo Alto index ONLY but the internal app doesn't show the data w/o access to the Palo Alto app.

The problem I am having is that the specific user role cannot display Palo Alto data in the internal app unless that role has access to the Palo Alto app - which I would like to avoid. Is there a way to accomplish this through rights to the index or something?

Thanks!

Dave

Tags (1)
0 Karma
1 Solution

ccsfdave
Builder

Yeah, it appears that if I give permission to my custom app and the index which holds the data which the other app uses. Then merge in the props.conf and transforms.conf then my users have access to the data AND the fields are extracted in a way that allows existing dashboards to work.

Thanks!

View solution in original post

ccsfdave
Builder

Yeah, it appears that if I give permission to my custom app and the index which holds the data which the other app uses. Then merge in the props.conf and transforms.conf then my users have access to the data AND the fields are extracted in a way that allows existing dashboards to work.

Thanks!

gsopkoTC
Path Finder

Can you elaborate? I might be having a similar issue with our app and another. I'm thinking my issue is permissions related as well but it's the other app permissions that are suspect.

Thanks!

0 Karma

ccsfdave
Builder

I have more information on this. It is not a matter of not seeing the data, the custom app cannot see the field extractions from the other app. How can I migrate those from app to app? Where would all the locations be that could define field extractions?

Thanks!

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

A Four-Part Event Series: Full Stack Observability For the AI Era

As AI reshapes applications, infrastructure, and the way teams operate, the traditional boundaries of ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...