Hi All,
Overview :
I am receiving logs from 40 fortigate firewall devices across the world and all are being indexed into same index , as of now we prepared dashboards and enabled dropdown based on the devicename(location) field present in the log.
Question : I have a situation like i need to restrict the dashboards to users based on the "devicename". meaning the user from a location must see only their location specific devicelogs , not others
Is it possible to restrict the user access by fieldvalue?
