Dashboards & Visualizations

What are the minimum capabilities to log into Splunk and view a pre-scheduled dashboard?

the_wolverine
Champion

I'd like to grant a user access to a dashboard. He does not need to run searches, just view a dashboard I created with pre-scheduled searches populating the panels.

lfedak_splunk
Splunk Employee
Splunk Employee
0 Karma

jkat54
SplunkTrust
SplunkTrust

search is the only capability i think they need... however I believe in practice i've found they also need rest_properties_get and rest_properties_set.

combine that with the indexes they're allowed to search and read access to the app for the role and you should be good.

0 Karma

jkat54
SplunkTrust
SplunkTrust

You said they are prescheduled so now that I think of it, they don't need any capabilities.

0 Karma

jkat54
SplunkTrust
SplunkTrust

Have you given thought to HTML dashboards? Its a perfect use case. Especially if there isnt a form.

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...