Dashboards & Visualizations

How to create a default app/dashboard for all users - and an alternate dashboard in that same default app visible to admins only

New Member

I've recently cloned a dashboard within APP Web Proxies (Proxy SG). I'm able to view that dashboard by searching for it in the upper left but how can I make this the default APP for Everyone (basic users) as the default dashboard? Can I assign that everyone gets the limited (cloned) dashboard while ADMIN users get the full blown proxy dashboard? Thanks...

0 Karma

Splunk Employee
Splunk Employee

When you assign permissions to most elements you are offered granularity for read/write permissions at the role level.
Whether this is LDAP or local, Roles are built by inheriting permissions in a hierarchy.

So the way to default to all be it an app or a dashboard you create a role and join everyone to it... with the exception of the admin. So it's your "default" role say "allusers" which you would base on users or poweruser (which is based on users) and the only thing that allusers role does that differs is that it has a default app and that default app has a default dashboard and the permissions for Read on that app and dashboard have been granted to users who posess the allusers role.

CLARIFIED ANSWER:

Assign the Admin role to your admins.
And the admins can then see whatever it is they need to see.

To Assign All users a Default App
As for the default page that is shown for all users...
create a role for all users called say... all_users
That's your default rule. Make your "user" version of the dashboard the default dashboard in the app. Or... just leave it in the menu where it is now. add the Admin version to the menu (or dropdown or whatever).

Now change the permissions on that dashboard so that it's only READable by admins

now login as a user... and you'll see that the standard user just simply can't see the admin version.

There can be only one default page per app... so we can't do a switch depending on the login.
But you can set it up confident that the admins can see everything.
And your users only see what you deliberately assign them to see.

Make sense?

With Splunk... the answer is always "YES!". It just might require more regex than you're prepared for!
0 Karma

New Member

I fully see where you're going with this BUT, how do I link the limited dashboard to a newly created role LimitedUSERS? If I create a role, the default app is Web Proxies - this has two dashboards (one default and one cloned; cloned dashboard needs to be seen by the users added to the role LimitedUSERS. I'm not seeing where to assign the cloned dashboard. Thanks

0 Karma

Splunk Employee
Splunk Employee

I've amended my answer now that the question is clear. I'm going to also amend the title as the concept that one is a "clone" is irrelevant to the question.

With Splunk... the answer is always "YES!". It just might require more regex than you're prepared for!
0 Karma