Security

How to setup auto search based on login name?

Cbr1sg
Path Finder

Hello all,
I want to setup Splunk in such a way that when an user logins to the dashboard, Splunk would be able to detect the name of user (preferably via LDAP search) and say "hello Mr. ABC, welcome to the dashboard blah blah" and it will also automatically search for the data related to that specific user and display the data without manual input from user himself.

Is it possible and how can it be done in Splunk? Thanks

Tags (1)
0 Karma
1 Solution

HiroshiSatoh
Champion

Is this information?

|rest /services/authentication/current-context/context

View solution in original post

paramagurukarth
Builder

There are some such useful details are readily available in splunk token.
You can use that in your html and search...
Check this

Cbr1sg
Path Finder

very useful info, thank you!

0 Karma

paramagurukarth
Builder

Always welcome

0 Karma

splunker12er
Motivator

Search query:

| rest /services/authentication/current-context | where username!="splunk-system-user" | fields username| replace * with "Welcome \"*\" !" in username

Create a dashboard panel
Set the Visualization to "single value"
as like u may customize your search query and pass the username to load user related results

alt text

Cbr1sg
Path Finder

unfortunately i can't accept another answer, but this also solves my problem. Thank you!

0 Karma

paramagurukarth
Builder

But you can accept the best answer

0 Karma

HiroshiSatoh
Champion

Is this information?

|rest /services/authentication/current-context/context

Cbr1sg
Path Finder

Exactly what I'm looking for. thank you very much

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Index This | What travels the world but is also stuck in place?

April 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Discover New Use Cases: Unlock Greater Value from Your Existing Splunk Data

Realizing the full potential of your Splunk investment requires more than just understanding current usage; it ...

Continue Your Journey: Join Session 2 of the Data Management and Federation Bootcamp ...

As data volumes continue to grow and environments become more distributed, managing and optimizing data ...