Security

Can you help me with an issue involving the user quota for a dashboard?

ashrafshareeb
Path Finder

Hi All,

I would like to know about the quota being used by the dashboard.

If a dashboard is opened by user X, will the query use up user X's quota or does it use up the person (owner) who had set it up?

For example: if it's a saved search that is being used in the dashboard, will the owner's search quota be used up every time any one opens that dashboard? Or is it the user who has recently opened the dashboard?

This is a bit confusing for me as a newbie, and I haven't found any references about the quota for the dashboard.

Any help or references would help!

0 Karma
1 Solution

tom_frotscher
Builder

Hi,

A Search defined directly on the dashboard will use the quota of the user who opens the dashboard. If you use reports you are able to change the behavior of the search. You have the option to chose between "run as owner" or "run as user". You can find the option in the permission dialogue of the report.

If you chose the first option, i think the quota of the owner should be used. Here is a answer which should verify this behavior:
https://answers.splunk.com/answers/690906/question-about-run-as-owner-for-saved-searches.html

Greetings,

Tom

View solution in original post

tom_frotscher
Builder

Hi,

A Search defined directly on the dashboard will use the quota of the user who opens the dashboard. If you use reports you are able to change the behavior of the search. You have the option to chose between "run as owner" or "run as user". You can find the option in the permission dialogue of the report.

If you chose the first option, i think the quota of the owner should be used. Here is a answer which should verify this behavior:
https://answers.splunk.com/answers/690906/question-about-run-as-owner-for-saved-searches.html

Greetings,

Tom

HiroshiSatoh
Champion

This settings controls it on a role level basis: authorize.conf

links:
http://docs.splunk.com/Documentation/Splunk/7.2.1/Admin/Authorizeconf

I think that you should create a role for each user.

0 Karma
Get Updates on the Splunk Community!

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

Splunk Up Your Game: Why It's Time to Embrace Python 3.9+ and OpenSSL 3.0

Did you know that for Splunk Enterprise 9.4, Python 3.9 is the default interpreter? This shift is not just a ...