Deployment Architecture

Search View Not Displayed for Custom Role

g038123
Explorer

Hello,
Hoping someone can point out what I may be missing.

I have two new users I'm adding to our Splunk instance. I want to limit these users to a single App and only be able to search from a new Index I've created specifically for them.

The index is good to go. I created a new App and new custom role for these users, both named programmer.

The App permissions have been updated providing read rights for the programmer custom role.
I've also added the users to the new role.

Here's the problem, when the users log in, the only views available are Dashboards, Reports and Alerts, no Search view.
I've verified the default xml in the App is correct, here's a sample:

nav search_view="search" color="#FFDA3"
view name="search" default='true'
view name="reports"
view name="alerts"

Tags (1)
0 Karma

sloshburch
Ultra Champion

Did you not provide read access to Search & Reporting app? What you might prefer is to have read access to that app but hide it from navigation.

Play with app.conf's settings show_in_nav and is_visible. This is different than the app's read permissions and impacts all users of that app.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Introducing the 2026 - 2027 SplunkTrust cohort!

The goal of the SplunkTrust™ membership has historically been to acknowledge and recognize those who go above ...

Splunk Auto Ingestion Parallel Pipeline Scaling

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...