Splunk Search

Best way to publish a live dashboard that does not allow the logged in user to search other data, and has a persistent login.

bgagliardi1
Path Finder

I'm trying to put a dashboard on a TV in a high traffic hallway with people that aren't allowed to search the other information in an index.

1) How can I publish a live dashboard that doesn't provide someone the ability to click the magnifying glass and search the rest of the data, or manipulate the search or dashboard panels in anyway?
2) How can I setup persistent login for one service account?

Thanks

0 Karma

mstjohn_splunk
Splunk Employee
Splunk Employee

Hi @bgagliardi1. Did the answer below solve your question? If yes, please click “Accept” directly below the answer to resolve the post. If not, please comment with more information if you are still having issues.

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi bgagliardi1,
to have a user that access only one dashboard and read data from only one index you have to:

  • create a role (e.g. "guest") ex novo, not starting from user;
  • this role can access only one App and starts from it;
  • give to this role only the capabilities to run a search;
  • give to this role access only to your index;
  • create a user with only this role;
  • create a dashboard giving to the role "guest" access to the dashboard and the used knowledge objects only in read mode;
  • disable access to the address bar of your browser;
  • disable access to the Splunk Menu,
  • give to your dashboard an automatic refresh.

Bye.
Giuseppe

0 Karma

bgagliardi1
Path Finder

Cusello, which step ensures that the user stays logged in persistently? Or is there no need to log in if we run through these steps?

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...