Deployment Architecture

customized *NIX app for external users

konradwawryn
Explorer

Hi,

since few days Im trying to configure access to *NIX application to my external users.
I
m using that application to monitor my linux servers located in the cloud. To keep separate data for each group of the servers I created dedicated indexes and users.
Each user have access only to his own index.

Problem:
Im login with user "teama", Im clicking on *UNIX app. Next from the top menu I`m choosing:

CPU -- > CPU by host

alt text

And it seems that is not working. In index for that user I see CPU data. It seems that *UNIX app searching by default in "os" index. How to change it ? I need to setup for each user different default index. Maybe somebody could support me ?

alt text

0 Karma
1 Solution

araitz
Splunk Employee
Splunk Employee

Unfortunately version 4.6 and before of the *nix app is hard coded to index=os. This is was a mistake. To fix, you would have to copy unix/default/savedsearches.conf to unix/local/savedsearches.conf and change the references to index=os to the index where your data lives.

View solution in original post

0 Karma

araitz
Splunk Employee
Splunk Employee

Unfortunately version 4.6 and before of the *nix app is hard coded to index=os. This is was a mistake. To fix, you would have to copy unix/default/savedsearches.conf to unix/local/savedsearches.conf and change the references to index=os to the index where your data lives.

0 Karma
Get Updates on the Splunk Community!

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureThursday, March 27, 2025  |  11AM PST / 2PM EST | Register NowStep boldly ...

Splunk AppDynamics with Cisco Secure Application

Web applications unfortunately present a target rich environment for security vulnerabilities and attacks. ...