Dashboards & Visualizations

Is there a way to remove the "Open in Search, Inspect, and Export" options from the bottom of the dashboard?

jravida
Communicator

Hi folks,

I want to remove these so management doesn't start clicking on them and asking me a million questions. I just want them to see the dashboards, no drill down, and no search/export/inspect. I can't seem to find the option that removes these, and I am almost sure I've seen it before.

Thanks!

Joe

Tags (3)
1 Solution

nfilippi_splunk
Splunk Employee
Splunk Employee

@nidhigoyal is correct. Using "link.visible" should disable all links at the bottom of the panel, where you also have the ability to disable individually if you need.

http://docs.splunk.com/Documentation/Splunk/6.1.4/Viz/PanelreferenceforSimplifiedXML

Use the syntax shown below within each panel element:

<!-- disable all panel links -->
<option name="link.visible">false</option>

<!-- selectively disable each of the links -->
<option name="refresh.link.visible">false</option>
<option name="link.openSearch.visible">false</option>
<option name="link.openPivot.visible">false</option>
<option name="link.inspectSearch.visible">false</option>
<option name="link.exportResults.visible">false</option>

View solution in original post

RaviNandasana0
Explorer

Use Below options 

<option name="link.exportResults.visible">0</option>
<option name="link.inspectSearch.visible">0</option>
<option name="link.openPivot.visible">0</option>
<option name="link.openSearch.visible">0</option>
<option name="link.visible">0</option>
<option name="refresh.link.visible">0</option>
Tags (3)
0 Karma

proylea
Contributor

You could also completely hide the whole grey panel footer and sliding size bar with this bit of css.

.dashboard-row .dashboard-panel .ui-resizable-handle{
   display: none !important;
}
.dashboard-row .dashboard-panel .dashboard-element .panel-footer {
   display: none;
}

Kuj
Engager

Coooool 🙂

0 Karma

nfilippi_splunk
Splunk Employee
Splunk Employee

@nidhigoyal is correct. Using "link.visible" should disable all links at the bottom of the panel, where you also have the ability to disable individually if you need.

http://docs.splunk.com/Documentation/Splunk/6.1.4/Viz/PanelreferenceforSimplifiedXML

Use the syntax shown below within each panel element:

<!-- disable all panel links -->
<option name="link.visible">false</option>

<!-- selectively disable each of the links -->
<option name="refresh.link.visible">false</option>
<option name="link.openSearch.visible">false</option>
<option name="link.openPivot.visible">false</option>
<option name="link.inspectSearch.visible">false</option>
<option name="link.exportResults.visible">false</option>

grittonc
Contributor

The export button will not work if you are using a post-processing search, so if you are trying to enable it and it's not working that might be why.

See https://answers.splunk.com/answers/550070/why-export-button-is-grayed-out-in-some-of-my-pane.html.

cbhattad
Path Finder

Is it possible to do this per user/role?
We want some users to have the export feature but not for others

0 Karma

JL99
Explorer

Hi according to the suggestion, I have tried out and successfully getting the expected behavior that only "admin" role users can have the options to do "Open in Search"/"Export" and etc... Amend the SPL search accordingly to what you desire to achieve

<!-- Running searches and gaining role value for current user -->
<search>
<query>| rest /services/authentication/current-context | search username!=splunk-system-user
| fields roles </query>
<earliest>-15m</earliest>
<latest>now</latest>
<done>
<eval token="search_visible">if($result.roles$=="admin","true","false")</eval>
</done>
</search>
<!-- Running searches and gaining role value for current user -->

<!-- selectively disable only exporting fucntion -->
<!-- admin role can export, other roles can't  etc etc..-->

<option name="link.exportResults.visible">$search_visible$</option>



0 Karma

genesiusj
Builder

@cbhattad
Take a look at my post here.
https://answers.splunk.com/answers/793588/is-it-possible-to-assign-a-token-value-to-a-user-o.html

While it doesn't directly answer your question, you should be able to use the same logic to assign a token value of "false" or "true" to the
<option name="link.visible">$tok_Vis$</option> to obtain your required result.

Note, however, that even though search, and therefore the SPL that runs it, is not available, a savy user could right-click and view page source on the webpage. They could then filter through the
source and pick out your search code.

Hope this helps.
Thanks and God bless,
Genesius

0 Karma

rt99home
New Member

The above suggestion was working for version 6.1;

However, "Open in search", "inspect" and "export" options cannot be removed from splunk enterprise 6.3 version as suggested above. Can someone confirm?

0 Karma

ydeveloper
New Member

nice !!!!

0 Karma

MattZerfas
Communicator

According to the docs for 6.3 it should still work the same.

http://docs.splunk.com/Documentation/Splunk/6.3.0/Viz/PanelreferenceforSimplifiedXML

0 Karma

nidhigoyal
Explorer
<option name="link.visible">false</option>
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...

Edge Processor Scaling, Energy & Manufacturing Use Cases, and More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Get More Out of Your Security Practice With a SIEM

Get More Out of Your Security Practice With a SIEMWednesday, July 31, 2024  |  11AM PT / 2PM ETREGISTER ...