Hi Splunker !
I want many guests to log in with a common guest account to view Splunk Enterprise (Dashboard Studio).
Q1: Is there a limit to the number of sessions that can be logged in at the same time with one account?
Q2: If there is a limit, what is the maximum?
Q3: Where to set it?
* Do not have to consider the NW limitation such as load balancer. Just want to know the limit number on the Splunk side.
As far as I know, there isn't a limit to the number of sessions that can be logged in at the same time BUT there is a limit to how many searches a user can run at the same time.
Will your users be running searches? If so, you would need to increase the user search job limit.
In the GUI you can increase it by clicking on Settings -> Roles -> (Select the role of the shared Splunk account) -> Edit -> Resources tab -> and increase the standard search limit.
No, I don't think there is any documented limit for the number of sessions, as of today.
(Unless you encounter any resources related limits)
@VatsalJagani
Thank you for your reply
It seems that there is no document, as you said..
Actually there are some factors such as NW and HW resources, so I'm not sure if I'll reach the login session limit, but I want it to be a dashboard that everyone wants to access.
I've seen people sharing the Splunk dashboard publically like that so it should work.
As far as I know, there isn't a limit to the number of sessions that can be logged in at the same time BUT there is a limit to how many searches a user can run at the same time.
Will your users be running searches? If so, you would need to increase the user search job limit.
In the GUI you can increase it by clicking on Settings -> Roles -> (Select the role of the shared Splunk account) -> Edit -> Resources tab -> and increase the standard search limit.
Thank you for your response!
And thank you for kindly telling me about Job limit!
For the 1st phase, I'm trying to start with the assumption that it will not take big/many queries, such as browsing in the dashboard studio to show it to the guest.
I don't think that should be too much of an issue as long as they are searches that finish fairly quickly. Your picture shows 6 people using the same login. Will it only be 6 people?
How many searches do your dashboards have?
I think a temporary increase in the searches should be fine. If possible, I'd also make sure the Search Head has enough CPU to handle multiple searches requested at almost the same time.
Thank you for your response!
Since it is a dashboard that is open to the public on the internal network and can be accessed from guest accounts, I think that future access analysis will reveal exactly how many people will access at the same time. However, since it is the first time, I expect that less than 20 people will log in at the same time.
Depending on the content, there are about 10 to 20 query search displays per content in Dashboard Studio. I'm trying to query only the data extracted for dashboard display (<several GB)
Thank you for mentioning CPU resources. I would like to secure sufficient resources while testing (in-house IaaS)