Are you a member of the Splunk Community?
- Find Answers
- :
- Splunk Administration
- :
- Admin Other
- :
- Security
- :
- Re: Admin account to view all the Dashboard create...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Admin account to view all the Dashboard created by individual users
Hello Everyone,
We are having a situation on our Splunk system.
We recently noticed that there are several Dashboards which are being created by users and shared only for them.
Being an Administrator to the Splunk system we are unable to view those Dashboards in normal way until we query those Dashboard via rest.
Is there anyway to set view access for Administrator role to view all the Dashboards/reports/alerts/scheduled search that are being created by users
Thank you
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I think if he got Admin access, he should be able to see from both the locations.
Please correct me if I am wrong.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I agree that admin should be able to access all the dasboards but thats not the case. I am admin and not be able to access private dashboard created by other users. Even when I access through URL its through error "Page not found". I tried to add few more roles/capabilities in Admin but didn't work.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Did you check in the all configurations as @isoutamo mentioned?
I think something else got messed up with your roles. Trying adding "admin_all_objects" if it not preset already.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yes workaround suggested by @isoutamo worked like a charm. I was able to change permission from settings>user interface>views. Just wondering why Admin doen't have permission to access it by default.
And admin_all_objects was alredy present. I think this is the default behavior. I check in mulitple installation and everywhere its same.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This is valid also with admin role. Via views you could see only your own or app/globally shared dashboards, but not anyone’s private KOs.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You should be able to see them by going to
settings>User Interface>Views
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You couldn’t see those private KO e.g. dashboards via this path. The only way is see those via all KOs.
r. Is,o
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
I am looking for the same. Did you find a solution.
Thanks
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You can see those via settings -> all knowledge object (or something similar).
r. Ismo
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thank you!
Tech Talk Recap | Mastering Threat Hunting
Observability for AI Applications: Troubleshooting Latency
Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?
