Monitoring Splunk

Session timeout for a Single username (not group) in Splunk Enterprise

JY1
Engager

Hello, hoping someone can guide me here. Trying to find a way to have a single usernames dashboard session timeout be different from the group that they are in. Using Splunk enterprise and trying to find a way to just change the single user's timeout. Is this possible? Can't find any resources online for this. 

Thanks.

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

The session timeout is system-wide and not selectable per-user or per-role.

---
If this reply helps you, Karma would be appreciated.
0 Karma

JY1
Engager

I am able to change it per role. Eg: I can set it differently for User vs Admins. But was hoping it can just change it for a single user. 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Perhaps we're thinking of different time limit settings.

If you can set a per-role value then assign the special user to a new role with the desired value.  Have the new role inherit from their existing role so they keep the same capabilities and access.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...