Dashboards & Visualizations

Issues related to Seclytics dashboards

dipali
New Member

Users with an Admin or Power role are able to view the Seclytics dashboard provided by the "Seclytics for Splunk App". However, when users with the "User" role attempt to access the same dashboard, the content does not display.

Additionally, we discovered that the lookup file "event_by_days.csv" is missing from the expected directory:
/opt/splunk/etc/apps/seclytics-splunk-app/lookups/.

We would like to understand the following:

  1. Why is the dashboard visible to Admin/Power roles but not to the User role?
  2. Are there specific role-based permissions required to access this dashboard?
  3. Or is there a configuration change needed on our end to ensure all roles can access the content correctly?

Seclytics for Splunk App 

Labels (1)
0 Karma

livehybrid
Super Champion

Hi @dipali 

Im unable to download the app to check, but it sounds like there could be knowledge objects within the app which are not readable by the User role due to their RBAC/Metadata configuration.

Please check within the metadata/default.meta (and local.meta if you have made changes) to see what the different permissions are - feel free to share the contents here so we can walk through it.

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

0 Karma
Get Updates on the Splunk Community!

Splunk at Cisco Live 2025: Learning, Innovation, and a Little Bit of Mr. Brightside

Pack your bags (and maybe your dancing shoes)—Cisco Live is heading to San Diego, June 8–12, 2025, and Splunk ...

Splunk App Dev Community Updates – What’s New and What’s Next

Welcome to your go-to roundup of everything happening in the Splunk App Dev Community! Whether you're building ...

The Latest Cisco Integrations With Splunk Platform!

Join us for an exciting tech talk where we’ll explore the latest integrations in Cisco + Splunk! We’ve ...