Splunk Search

How to allow users dashboard access, but no Search & Reporting App access in Splunk 6.1.4?

DanielFordWA
Contributor

I have created an app that contains some simple XML dashboards.

I am trying to achieve the following.

User logs onto Splunk and lands on the Launcher Homepage

  • The user does not see the search bar
  • The user does not see the Search & Reporting App on the Launcher Homepage
  • The user does not see the Search & Reporting App in the Nav

I have created a new role for the dashboard user, for dashboards to work the search app is required.

I have looked at various forum posts but cannot seem to remove all access to the Search & Reporting functionality. I have tried editing the views/permissions/nav but I think I am missing something.

I have tried removing the views "Flashtimeline" and "Dashboard_live" but then the user gets an 404 error when logging into Splunk.

I would also like to remove the "settings" drop down for these users, but I'll take getting the above to work first.

Is the above possible?

Thanks,

Dan

1 Solution

DanielFordWA
Contributor

I'm a fool!

First time doing this, so app context was a new thing to me.

Recreated all the searches and dashboards from within the app and now everything works as it should. I can remove access to the search app and the Dashboard app will still work!

The user still gets the "manage app" button on the launcher homepage which leads to a 404 but everything else looks good.

View solution in original post

DanielFordWA
Contributor

I'm a fool!

First time doing this, so app context was a new thing to me.

Recreated all the searches and dashboards from within the app and now everything works as it should. I can remove access to the search app and the Dashboard app will still work!

The user still gets the "manage app" button on the launcher homepage which leads to a 404 but everything else looks good.

DanielFordWA
Contributor

I am on 6.1.4

0 Karma
Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...