We have a set of dashboards for a client and we limited the time range picker to only offer date range as an option. is there a way to limit to only specific dates within the last 3 months to be the only dates they can enter into the text boxes. We don't want them to search beyond the last 3 months, but they should be able to look at the metrics for any specific day or range within those 3 days.
I checked the authorize.conf and you can prevent the time window from becoming too large for a role, but this wouldn't stop someone from changing the latest time to say 1 month ago and looking back 3 months from there.
If you cannot allow them to search beyond 3 months perhaps you could use summary indexing to provide only the data they should see?
Is the goal here to only offer certain options on the dashboard or to actually restrict the access to a particular period of time?
Alerts for Splunk Admins https://splunkbase.splunk.com/app/3796/ Version Control for Splunk https://splunkbase.splunk.com/app/4355/