Security

Splunk Dashboard is loading for admin and Dashboard Owner not for other Users?

Path Finder

Splunk Dashboard is loading in usual manner speadily for the Dashboard Owner and Admin user.
While for the viewers dashboard panels are showing "waiting for data".

My Splunk Version is 6.6.0
For the viewer role, i have assigned enough capabilities and roles.
Please suggest me something to get rid of this

TIA

0 Karma
1 Solution

Dear @sarvesh_11,

If data loaded by dashboard panels are high then it will be slow. how many panels in your dashboard are there. what is the data volume indexed in each index for every run.
If your using the same index and some portion of the query is also same in all panels. Then you can try something like Basesearch
Please go through the below links.. Hope it helps you in some way.

Thanks..

View solution in original post

0 Karma

Dear @sarvesh_11,

If data loaded by dashboard panels are high then it will be slow. how many panels in your dashboard are there. what is the data volume indexed in each index for every run.
If your using the same index and some portion of the query is also same in all panels. Then you can try something like Basesearch
Please go through the below links.. Hope it helps you in some way.

Thanks..

View solution in original post

0 Karma

Path Finder

Thanks @shankarananth for dropping by.
Well yes the dashboard is having many panels, the index name is the common, but source are all different for each panel. We accept the fact it will take time to load the whole dashboard, but our concern is :
Dashboard with all the panels is loading for Admin and dashboard owner users, while at the same time, the normal users the viewers of the dashboard are not getting the panels after waiting for minutes(3-5) also.

So just want to know is there any prioritization in viewing the dashboard?
Atleast after waiting for minutes the panel should be populated with data, rather than showing "waiting for data" and that too for some panels, in random manner, not particularly for specific panel.

0 Karma

@sarvesh_11,

Check the resource utilization by each user. Try to load the dashboard with less number of panels for all the users. Sometime for general user, resource allocation will be very low for running the query. If user reaches the max allocation of resource by running the query then we can get info like "waiting for data".
Is dashboard owner is a power user role holder or normal user role holder. If dashboard owner a power user, there will be lot of resource allocated for him.He can run the dashboard easily. If dashboard owner is a normal user role holder, then check his resource allocation and assign the same to all users. Normally Admin role will have high privileges and resource. so there wont be any issue in loading the dashboard..

Thanks ..

0 Karma

Path Finder

@shankarananth , well the resource are under control.
I have made some changes in authorize.conf for the role : user
namely :
User-level concurrent search jobs limit,
User-level concurrent real-time search jobs limit,
Role-level concurrent search jobs limit etc.

My viewers are getting the data in all panels. not sure it is permanent solution. but it seems to be working for me.

0 Karma

@sarvesh_11,

Good to hear.. Glad to help you. Please upvote any comments which help you.

Happy Splunking

0 Karma