Splunk Search

How to disable default drilldown in the search window for certain users?

simpkins1958
Contributor

For certain users, we do not want them to drilldown in the Splunk Search window, and for another set of users we do want that functionality.

Is there a role or conf file setting we can use to limit as specific group of users from getting to the search UI when a specific drilldown is not specified for a chart?

Most of our drilldowns go to other dashboards in our Splunk app. But some go directly into Splunk search that generated the chart, because we have not provided specific drilldown behavior. For our admin users, this is the functionality we want. But for non-Admin users, we do not want to expose the search to them.

0 Karma
1 Solution

lguinn2
Legend

AFAIK there is no way to restrict this by role.
Either the dashboard panel has drilldown enabled or it does not. You could have 2 versions of the dashboard... that's a pain, but I don't have another idea for you.

View solution in original post

0 Karma

lguinn2
Legend

AFAIK there is no way to restrict this by role.
Either the dashboard panel has drilldown enabled or it does not. You could have 2 versions of the dashboard... that's a pain, but I don't have another idea for you.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...