I want to setup Splunk in such a way that when an user logins to the dashboard, Splunk would be able to detect the name of user (preferably via LDAP search) and say "hello Mr. ABC, welcome to the dashboard blah blah" and it will also automatically search for the data related to that specific user and display the data without manual input from user himself.
Is it possible and how can it be done in Splunk? Thanks
| rest /services/authentication/current-context | where username!="splunk-system-user" | fields username| replace * with "Welcome \"*\" !" in username
Create a dashboard panel
Set the Visualization to "single value"
as like u may customize your search query and pass the username to load user related results