Dashboards & Visualizations

Customizing Dashboard view for each user

wendyctlam
Explorer

Hi,

I have a question about customizing splunk view for specific user.

I have views called

System Admin view for sysadmin
Application Admin for appadmin

How do I assign these two views for them when they first logon to splunk instead of the default one?

Thanks!

Wendy

Tags (1)
0 Karma

Damien_Dallimor
Ultra Champion

You could setup seperate Splunk apps for system admins and application admins.
And then by using Splunk's role based access controls , set the default app for the "sysadmin" role and the "applicationadmin" role.
Within each of these apps you can then define which is the default view, scroll down to "Set a Default View".
And then when a user logs in , depending on what role they are in , they will land on the intended default view.

wendyctlam
Explorer

Hi,

I created an app and chose "barebone". When I go into this app and try to run search, it gives me Could not find writer for: /psadmin/sysadmin/history/.dummy_history [0] [C:\Program Files\Splunk\etc]. Is there a permission setting I need to do?

thanks in advance,

Wendy

0 Karma
Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and stall ...

Print, Leak, Repeat: UEBA Insider Threats You Can't Ignore

Are you ready to uncover the threats hiding in plain sight? Join us for "Print, Leak, Repeat: UEBA Insider ...

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...