Splunk Search

How to allow users dashboard access, but no Search & Reporting App access in Splunk 6.1.4?

DanielFordWA
Contributor

I have created an app that contains some simple XML dashboards.

I am trying to achieve the following.

User logs onto Splunk and lands on the Launcher Homepage

  • The user does not see the search bar
  • The user does not see the Search & Reporting App on the Launcher Homepage
  • The user does not see the Search & Reporting App in the Nav

I have created a new role for the dashboard user, for dashboards to work the search app is required.

I have looked at various forum posts but cannot seem to remove all access to the Search & Reporting functionality. I have tried editing the views/permissions/nav but I think I am missing something.

I have tried removing the views "Flashtimeline" and "Dashboard_live" but then the user gets an 404 error when logging into Splunk.

I would also like to remove the "settings" drop down for these users, but I'll take getting the above to work first.

Is the above possible?

Thanks,

Dan

1 Solution

DanielFordWA
Contributor

I'm a fool!

First time doing this, so app context was a new thing to me.

Recreated all the searches and dashboards from within the app and now everything works as it should. I can remove access to the search app and the Dashboard app will still work!

The user still gets the "manage app" button on the launcher homepage which leads to a 404 but everything else looks good.

View solution in original post

DanielFordWA
Contributor

I'm a fool!

First time doing this, so app context was a new thing to me.

Recreated all the searches and dashboards from within the app and now everything works as it should. I can remove access to the search app and the Dashboard app will still work!

The user still gets the "manage app" button on the launcher homepage which leads to a 404 but everything else looks good.

DanielFordWA
Contributor

I am on 6.1.4

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...