Reporting

How to limit users from seeing my search query in scheduled reports?

sssignals
Path Finder

Hi Splunkers

My dashboard uses a lot of scheduled reports. Although I have limited user access to my dashboard xml code, can I limit user access to scheduled reports? Currently, users can open up scheduled reports and amend my query and save them.

Thanks for reading.

0 Karma

nadlurinadluri
Communicator

You can give only read access to that user group (and splunk permissions are based on usergroup level, not on individual level). Giving read access alone should solve your problem.

0 Karma

somesoni2
Revered Legend

You can lockdown access to your scheduled report (or any knowledge artifact for that matter) by providing appropriate sharing permission for roles. Please note that if you keep Write access for a role, all the users within that Role would be able to write/modify it.

0 Karma
Get Updates on the Splunk Community!

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...