Dashboards & Visualizations

Customizing Dashboard view for each user

wendyctlam
Explorer

Hi,

I have a question about customizing splunk view for specific user.

I have views called

System Admin view for sysadmin
Application Admin for appadmin

How do I assign these two views for them when they first logon to splunk instead of the default one?

Thanks!

Wendy

Tags (1)
0 Karma

Damien_Dallimor
Ultra Champion

You could setup seperate Splunk apps for system admins and application admins.
And then by using Splunk's role based access controls , set the default app for the "sysadmin" role and the "applicationadmin" role.
Within each of these apps you can then define which is the default view, scroll down to "Set a Default View".
And then when a user logs in , depending on what role they are in , they will land on the intended default view.

wendyctlam
Explorer

Hi,

I created an app and chose "barebone". When I go into this app and try to run search, it gives me Could not find writer for: /psadmin/sysadmin/history/.dummy_history [0] [C:\Program Files\Splunk\etc]. Is there a permission setting I need to do?

thanks in advance,

Wendy

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Between hands-on technical sessions, keynote reveals, and diving into live architectures, .conf26 is packed ...

Join the Hackathon at .conf26 and build a No-Code AI agent

Join us for the AI Agent Buildathon, an in-person, three-hour hands-on Hackathon where you’ll use Splunk Agent ...