Security

How to setup auto search based on login name?

Cbr1sg
Path Finder

Hello all,
I want to setup Splunk in such a way that when an user logins to the dashboard, Splunk would be able to detect the name of user (preferably via LDAP search) and say "hello Mr. ABC, welcome to the dashboard blah blah" and it will also automatically search for the data related to that specific user and display the data without manual input from user himself.

Is it possible and how can it be done in Splunk? Thanks

Tags (1)
0 Karma
1 Solution

HiroshiSatoh
Champion

Is this information?

|rest /services/authentication/current-context/context

View solution in original post

paramagurukarth
Builder

There are some such useful details are readily available in splunk token.
You can use that in your html and search...
Check this

Cbr1sg
Path Finder

very useful info, thank you!

0 Karma

paramagurukarth
Builder

Always welcome

0 Karma

splunker12er
Motivator

Search query:

| rest /services/authentication/current-context | where username!="splunk-system-user" | fields username| replace * with "Welcome \"*\" !" in username

Create a dashboard panel
Set the Visualization to "single value"
as like u may customize your search query and pass the username to load user related results

alt text

Cbr1sg
Path Finder

unfortunately i can't accept another answer, but this also solves my problem. Thank you!

0 Karma

paramagurukarth
Builder

But you can accept the best answer

0 Karma

HiroshiSatoh
Champion

Is this information?

|rest /services/authentication/current-context/context

Cbr1sg
Path Finder

Exactly what I'm looking for. thank you very much

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 2 releases of new security content via the ...

Announcing the 1st Round Champion’s Tribute Winners of the Great Resilience Quest

We are happy to announce the 20 lucky questers who are selected to be the first round of Champion's Tribute ...

We’ve Got Education Validation!

Are you feeling it? All the career-boosting benefits of up-skilling with Splunk? It’s not just a feeling, it's ...