Monitoring Splunk

Session timeout for a Single username (not group) in Splunk Enterprise

JY1
Engager

Hello, hoping someone can guide me here. Trying to find a way to have a single usernames dashboard session timeout be different from the group that they are in. Using Splunk enterprise and trying to find a way to just change the single user's timeout. Is this possible? Can't find any resources online for this. 

Thanks.

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

The session timeout is system-wide and not selectable per-user or per-role.

---
If this reply helps you, Karma would be appreciated.
0 Karma

JY1
Engager

I am able to change it per role. Eg: I can set it differently for User vs Admins. But was hoping it can just change it for a single user. 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Perhaps we're thinking of different time limit settings.

If you can set a per-role value then assign the special user to a new role with the desired value.  Have the new role inherit from their existing role so they keep the same capabilities and access.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...