Monitoring Splunk

Session timeout for a Single username (not group) in Splunk Enterprise

JY1
Engager

Hello, hoping someone can guide me here. Trying to find a way to have a single usernames dashboard session timeout be different from the group that they are in. Using Splunk enterprise and trying to find a way to just change the single user's timeout. Is this possible? Can't find any resources online for this. 

Thanks.

Labels (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

The session timeout is system-wide and not selectable per-user or per-role.

---
If this reply helps you, Karma would be appreciated.
0 Karma

JY1
Engager

I am able to change it per role. Eg: I can set it differently for User vs Admins. But was hoping it can just change it for a single user. 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Perhaps we're thinking of different time limit settings.

If you can set a per-role value then assign the special user to a new role with the desired value.  Have the new role inherit from their existing role so they keep the same capabilities and access.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.0.2 Availability: On cloud and On-premise!

A few months ago, we released Splunk Enterprise Security 8.0 for our cloud customers. Today, we are excited to ...

Logs to Metrics

Logs and Metrics Logs are generally unstructured text or structured events emitted by applications and written ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...