Is there an simple way (perhaps this is a feature request?) to manage user's views of dashboard views?
For example, I have a dashboard with about 15 visualizations and lists. I understand that I need to create an app, change permissions of the dashboard to said app, change each search/report permissions to the app (or set to global), discover all my field extractions are broken -- give up in frustration because I have over 200 field extractions and don't know every single extraction used throughout the reports for this one dashboard.
Is there a more blanket way to allow a user to access this information without the micro-granularity of the permission settings? (Other than giving up and giving everyone the Admin password...)
I just heard from a friend of mine who happens to be Splunk engineer (ya, I try not bother him all the time with questions like this... ;-).
Turns out, this is all backwards. The suggested way is to build a new app, then construct the dashboard within the app -- not the other way around.
Of course, it doesn't help the fact that I already have a dashboard...
Yes , Go to Manager ., Access controls, choose the user, choose their default app, then give them the correct privileges, and or role. You can also create a new role for these users.
I hope that helps..
Oh, AND there's a place to set the default app to the role, also -- yes that's set to the new "default app". So, I have a user default app set to the new one, the user has a new role assigned to it, and that default app is set to the new one -- and when logging in, we go to the search screen...
well, not really. Missed some steps...after creating a role and assigning the new user to it, ensure the permissions of the dashboard so that the new role can view it.
...and I'm still getting "No results found..." in some of the windows in the dashboard (some work). And when logging on, it takes me to the search screen where I have to select the correct dashboard -- yes I set the user's default app to the proper app (and not to "search").