Splunk Search

Display search result as a label text or non editable text on the dashboard

sh254087
Communicator

I am trying to retrieve and display the user name of the logged in user as a label or a non-editable text on the dashboard. 

I'm able to fetch the user name using this query (here I'm limiting this example to 'admin') -

| rest /services/authentication/current-context splunk_server=local
| where user = "admin"
| table user

This search will always return single value.

I now want to display this as a label/ non-editable text on the dashboard - For example, to display on top of the dashboard like

"Logged-in user : admin" 

Can someone please help achieve this? 

Labels (1)
0 Karma

impurush
Contributor

Hi @sh254087 

If you are running the below query in the dashboard, you can set the token in the dashboard.
So, you can use the $token_a$ in your label where you want to display it.

| rest /services/authentication/current-context splunk_server=local
| where user = "admin"
| table user
-------------
<progress>
<set token="token_a">$result.user$</set>
</progress>

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk, and empower your SOC to reach new heights! Duration: 1 hour  Prepare to ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...