Hi,
I can perform searches without problem in user accounts and admin accounts without a problem. But dashboards not working for users(except admin). After further investigation, I found search jobs initiated by dashboards cannot be accessed by the owner. But those search jobs can be accessed from admin. Because of this dashboards not working for non-admin users. This is what I found in search.log.
{"success": false, "offset": 0, "count": 0, "total": 0, "messages": [{"type": "ERROR", "message": "job sid=test_user_dGVzdF91c2Vy__search__search1_1610628799.1913 not found", "time": "2021-01-14T12:53:26+0000"}], "data": null}
Did anyone experience the same, please let me know what's wrong?
Thanks
Chandika
https://docs.splunk.com/Documentation/Splunk/8.1.1/Viz/DashboardPermissions
Is everything okay?
Yes , permissions set, Users can access dashboards without a problem. But no permissions search jobs that initiated by the dashboards. No problem in dashboard permissions. Dashboards are public.