Monitoring Splunk

Session timeout for a Single username (not group) in Splunk Enterprise

JY1
Engager

Hello, hoping someone can guide me here. Trying to find a way to have a single usernames dashboard session timeout be different from the group that they are in. Using Splunk enterprise and trying to find a way to just change the single user's timeout. Is this possible? Can't find any resources online for this. 

Thanks.

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

The session timeout is system-wide and not selectable per-user or per-role.

---
If this reply helps you, Karma would be appreciated.
0 Karma

JY1
Engager

I am able to change it per role. Eg: I can set it differently for User vs Admins. But was hoping it can just change it for a single user. 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Perhaps we're thinking of different time limit settings.

If you can set a per-role value then assign the special user to a new role with the desired value.  Have the new role inherit from their existing role so they keep the same capabilities and access.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

  Ready to master Kubernetes and cloud monitoring like the pros?Join Splunk’s Growth Engineering team for an ...

Wrapping Up Cybersecurity Awareness Month

October might be wrapping up, but for Splunk Education, cybersecurity awareness never goes out of season. ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...