Monitoring Splunk

Session timeout for a Single username (not group) in Splunk Enterprise

JY1
Engager

Hello, hoping someone can guide me here. Trying to find a way to have a single usernames dashboard session timeout be different from the group that they are in. Using Splunk enterprise and trying to find a way to just change the single user's timeout. Is this possible? Can't find any resources online for this. 

Thanks.

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

The session timeout is system-wide and not selectable per-user or per-role.

---
If this reply helps you, Karma would be appreciated.
0 Karma

JY1
Engager

I am able to change it per role. Eg: I can set it differently for User vs Admins. But was hoping it can just change it for a single user. 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Perhaps we're thinking of different time limit settings.

If you can set a per-role value then assign the special user to a new role with the desired value.  Have the new role inherit from their existing role so they keep the same capabilities and access.

---
If this reply helps you, Karma would be appreciated.
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Picture this. You arrive at .conf26 already having your socializing and networking plans mapped out. No ...

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence

Implementing Zero Trust (ZT) across complex environments often falters at the very beginning due to a ...