Prevent access to Splunk Web GUI

[jamesklassen]

Is there a way to prevent users from accessesing Splunk Web, while still retaining the ability to run searches?

I am using the Splunk Powershell reskit to develop an application that grabs data from Splunk using Powershell...but I don't want these users to be able to access Splunk Web.

[sowings · Accepted solution]

You could set their default application to one which you create with an empty view.

[sowings]

Well yes, but the wider point here is that you'd have to tune the role (and I do recommend creating a separate role for them) for those users to only be able to see the content you want them to see.

[sloshburch]

But wouldn't they still be able to just change apps?

[jamesklassen]

Great idea, thanks!

[araitz]

Run it only on loopback and access it via ssh port forwarding, RDP, or similar.

[jamesklassen]

Nope. Me and the other admins need to access splunkweb, the support group that I'm providing this access to should not

[Lowell]

I suppose that simply shutting down splunkweb isn't the option you're looking for?