Security

How to setup auto search based on login name?

Cbr1sg
Path Finder

Hello all,
I want to setup Splunk in such a way that when an user logins to the dashboard, Splunk would be able to detect the name of user (preferably via LDAP search) and say "hello Mr. ABC, welcome to the dashboard blah blah" and it will also automatically search for the data related to that specific user and display the data without manual input from user himself.

Is it possible and how can it be done in Splunk? Thanks

Tags (1)
0 Karma
1 Solution

HiroshiSatoh
Champion

Is this information?

|rest /services/authentication/current-context/context

View solution in original post

paramagurukarth
Builder

There are some such useful details are readily available in splunk token.
You can use that in your html and search...
Check this

Cbr1sg
Path Finder

very useful info, thank you!

0 Karma

paramagurukarth
Builder

Always welcome

0 Karma

splunker12er
Motivator

Search query:

| rest /services/authentication/current-context | where username!="splunk-system-user" | fields username| replace * with "Welcome \"*\" !" in username

Create a dashboard panel
Set the Visualization to "single value"
as like u may customize your search query and pass the username to load user related results

alt text

Cbr1sg
Path Finder

unfortunately i can't accept another answer, but this also solves my problem. Thank you!

0 Karma

paramagurukarth
Builder

But you can accept the best answer

0 Karma

HiroshiSatoh
Champion

Is this information?

|rest /services/authentication/current-context/context

Cbr1sg
Path Finder

Exactly what I'm looking for. thank you very much

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) v3.54.0

The Splunk Threat Research Team (STRT) recently released Enterprise Security Content Update (ESCU) v3.54.0 and ...

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

New Learning Videos on Topics Most Requested by You! Plus This Month’s New Splunk ...

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...