Security

can't run a dashboard with radialGauge?

Conradj
Path Finder

Hi,

I have a dashboard that shows me some simple metrics in real-time. These are displayed as a mixture of "single" values and "radialGauges"

I have created a special user to use to view this dashboard who has restricted rights.
The have rights to this app only and they are a member of their own role. The user_role I created for them is a member of the "users" and "power" users groups.

The user_role group has the dashboard app as its default, is limited to 12 concurrent search jobs, 12 concurrent real-time search jobs and is limited to 100mb for jobs disk quota.

When I login as my admin user the dashboard runs fine without any errors and the radialgauges appear AOK.

When I login as this user and access the dashboard I get an error in red that states:

"Search Operation 'gauge' is unknown. You might not have permission to run this program."

and the radialGauges do not appear.

In my home.xml (the dashboard view) I have gauge configurations similar to:

<chart>

index="windows_perfmon" host="ps*4sql*" counter="% Processor Time" | stats avg(Value) as CPU | eval CPU=round(CPU,2) | gauge CPU 0 25 75 100
SQL Server CPU Utilisation
rt
rt
radialGauge
minimal

I am using Splunk 4.3.2 Build 123586.

I really don't want to run my dashboard as admin! Anyone have any ideas?

Cheers,

C.

0 Karma

Conradj
Path Finder

derp dee derp

Was using two different browsers to test permissions and such and tried editing the search in-app.

I removed the "| gauge 0 25 75 100" from the end of the searchSstring string (while leaving the vizualization settings alone)

Hey presto it works.

C.

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...