Splunk Search

Disable drilldown to search window / Stopping a user from using the Splunk Query window

smhsplunk
Communicator

In previous version of the Splunk one could goto the Edit
Icon in each page and could Disable/Enable the drilldown
in each of the panel. I am currently using Splunk version
6.4.1 and do not have this option.

I am creating a customer account and would like to
keep the customer always in the splunk dashboard
and never give him access to the splunk search window
where one can type SPL and run query. Is it possible
to disable this search window for an account. If not
how can I disable drilldown for each of the panels
and rows.

I tried

 <option name="drilldown">none</option>

but it doesnt work.

0 Karma

somesoni2
Revered Legend

Did you add this <option name="drilldown">none</option> inside each visualization?

e.g.

<table...other
..stuffs...
<option name="drilldown">none</option>
</table>

smhsplunk
Communicator

Thanks, this works.

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  &#x1f680; Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...