Is it possible to control timed access to a dashboard or a knowledge object?

[genesiusj]

Hello,

Is it possible to control timed access to a dashboard or a knowledge object?
I do not include the SPL here because I don't believe it is needed at this time.

We have a dashboard populated from the results of several outputlookup files run at 5:00 in the morning every day. The users of this dashboard have been advised to not use the dashboard until 5:45 am. However, it is still possible that they could. As all the outputlookup files are not in place until approx 5:40, the results on the dashboard might be incomplete or totally inaccurate.

Is there a way to control timed access to the dashboard?

Thanks and God bless,
Genesius

[richgalloway]

Splunk provides no way to regulate access to objects based on the time of day.

You may, however, be able to add a panel at the top of the dashboard that would compare the current time to 5:45am and warn early users that the data is from yesterday.  Perhaps the following query in a single value panel will do.

| makeresults 
| eval data_is_current = if(now() > relative_time(now(), "@d+5h+45m"), 1, 0) 
| eval msg = "Data is " . if(data_is_current==1, "", "NOT") . " current" 
| table msg