Hi,
For a few days now, my Splunk Dashboard shortcut has been displaying an error when I connect with the administrator account.
But when I use another account with less privilege via LDAP authentication, I don't get this error, the page displays fine.
Do you have any idea what the problem is?
Thanks for your help.
Your "working" role might have less capabilities but can have access to some objects (especially the dashboard itself) that the "non-working" role does not.
Check the _audit log for denied access to objects for the non-working user.
Thanks, but I'm not sure I understand your answer.
For information, the dashboard tab has always been displayed correctly. It's only since last week that this error has appeared! and only with my administrator account. I don't know why
You have two options:
1. Check the developer console and see if you can spot any errors
2. Check the _audit index (and maybe _internal) to see if there is anything significant around that time.
I don't think that's something that's happening commonly so it's about simply trying to find and isolate the cause.
Thank you for your time.
But I fixed the error, by going to the search & reporting -> Dashboard app, I selected a dashbord and clicked ‘set as Home dashboard’.
I went back to the Home page, found the dashboard I'd just assigned, then deleted it, and the error disappeared.