About dudhatjanhavi

dudhatjanhavi · ‎09-14-2023

Did you ever find out how to do this? I'm in a similar situation and was hoping you were able to find a workaround?

dudhatjanhavi · ‎05-04-2023

Yeah, however i want this role to be able to get a list of all users when it hits that endpoint. I want it to be so that any role with the admin_all_objects capability can get a list of all users. They can't edit users,create new users, etc though

dudhatjanhavi · ‎05-02-2023

unfortunately using reports is not an option. I've been trying to use restmap.conf to change the capability required for a GET method accessing authentication/users.. Although no luck. For reference here's what it looks like: [authentication-users:authentication-users] match=/authentication/users capability.get=admin_all_objects not sure what I might be doing wrong? This might be a better solution for my use case, if it works that is

dudhatjanhavi · ‎05-02-2023

I created a new role in Splunk, let's say "RoleA". I want RoleA to be able to see a list of all users and see all related information (like name, email, roles assigned etc.). However I don't want to allow RoleA to edit those users, or create or delete them. When I remove 'edit_user' capability from RoleA, I can achieve the latter - it cannot create/edit/delete the users. However with that capability not assigned to RoleA, it can't see a list of all users. Is there a way I can achieve both?

dudhatjanhavi · ‎11-16-2021

Ohh I see, do you know how else I can get that filter information then?

dudhatjanhavi · ‎11-15-2021

I was able to get it from there, I am not able to get the filter info correctly though. When I go to a dashboard splunk creates this log. However, when I change any filters, no more logs are created by Splunk, unless I refresh the dashboard. Even if the url updates when the filter is changed, no additional events are created in _internal. @richgalloway @PickleRick

dudhatjanhavi · ‎11-12-2021

Hi everyone, I want to track/find which user used which dashboard at what time. I am able to do this by the information in index=_internal. However, I also want to find out what dashboard filters the users added when they were looking at the dashboard. We store this filter information in the dashboard URL. Is there maybe somewhere that Splunk collects the URLs of the dashboards visited? Then I can use a regex to scrape out the information I need. Or is there somewhere else I can find this information?

Posts	8
Solutions	0
Karma Given	5
Karma Received	0
Member Since	‎10-04-2021

Online Status	Offline
Date Last Visited	‎09-15-2023 06:00 PM

How can I give a role read-only access to users?

Dashboard Usage with filters used

Re: Which capability should I use for editing the ...

Re: How can I give a role read-only access to user...

Re: How can I give a role read-only access to user...

How can I give a role read-only access to users?

Re: Dashboard Usage with filters used

Re: Dashboard Usage with filters used

Dashboard Usage with filters used