Is there any way to restrict users to see data and allow them to view dashboard only

[puneethgowda]

Hi,

Urgent help needed.

Is there any way to restrict users to see data and allow them to view dashboard only

They should not see any raw data except the dashboard which we shared

Regards,

Puneeth

[puneethgowda]

Hi cusello thanks a lot we have made the same thing and working great now the new thing is we need to give change password access to the users how do we do this!

[gcusello · Accepted solution]

hi puneethgowda

to do this, you have to create drilldown dashboard to grant all the needed accesses to logs to your users, but at the last level of your drilldown dashboards you have to set "No drilldown" in every panel.

In addition you have to disable the "Open in search" button of each panel, inserting the following option in every panel:

<option name="link.visible">false</option>

(for details see http://docs.splunk.com/Documentation/Splunk/latest/Viz/PanelreferenceforSimplifiedXML)

At the same time you have to disable access to the "Search and Reporting" App and to the search dashboards of each App.

If instead you want to limit access to a part of logs, you have to divide your logs into different indexes and grant access to each index to the correct users group.

Bye.
Giuseppe

[niketn]

@puneethgowda....if you take out the search capability, they might not be able to dashboards also since they internally will be running searches in the same index.

What you can do is disable all drilldowns in the dashboard panels. Edit the navigation > default.xml to remove search link and use hideSplunkBar to give only required menu to the users. (Refer to the following developer documentation on how to create custom Splunk app navigation: http://dev.splunk.com/view/webframework-developapps/SP-CAAAEP9)

You can also restrict user access to specific indexe/s (which is/are being used by the dashboard).

[puneethgowda]

Thank you so much i am seeing your answer after i struggle and got the same answer from some other source any way your answer is more clear thank you so much

[Masa]

@niketnilay, please use Answer instead of comment field in Question