Dashboards & Visualizations

How to identify reports/Dashboard owned by user?

vinodsinha
Explorer

HI Team,

How can figure out reports/dashboard which owned by user, any Splunk query to find out, I tried from GUI as well but didn't work.
Let me know.

Thanks,
V

Tags (1)
0 Karma

fdi01
Motivator

try :

 | rest /servicesNS/PutUserNameHere/-/data/ui/views | table author title eai:acl.app | eval Type="Dashboard" | append [| rest /serviceNS/PutUserNameHere/-/saved/searches | table author title eai:acl.app | eval Type="SavedSearch/Report"] | rename author as Owner title as Name eai:.acl.app as AppName

chimell
Motivator

Hi
Look at an example

index=_internal  | rex "\/app\/(?<myApp>\w+)\/(?<myView>\w+)\"" | stats    values(myView) AS myViews by user

alt text

The capture above is his result

If you want to add App which contain report or dashboard use this search code

index=_internal source=*access.log */app/* | rex "\/app\/(?<myApp>\w+)\/(?<myView>\w+)\"" | stats  values(myApp) AS myApps , values(myView) AS myViews by user
0 Karma

chimell
Motivator

Note that you can edit this search code as you want

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...