Can graylog present different views to different users?

Graylog Central (peer support)
1

Hi,

Can graylog present different views to different users? such as user A can only see messages from input 1, while user B can only see messages from input 2? What’s the best way to accomplish this goal?

Thanks,
-Li

2

Under System/Authentication you can set up Roles. With Roles you can set what streams or dashboard your users have access to (read/edit). Then just give roles to your users and you should be set.

One thing I do in my setup is to make a stream per input. Single rule of “gl2_source_input must match exactly [input_id]”. That will give you the chance to give users access to your inputs so to speak.

3

@sgarciam Awesome! Thanks a lot!!

4

@sgarciam how to find out what the input_id is? :grinning:

5

You could click on “Show received messages” on the System / Inputs page. This will generate a search query which contains the correct input ID.

6

@jochen Thanks! yeah I just figured that one out through comparing URL :slight_smile: Now I created a stream with “gl2_source_input must match exactly [input_id]”, but when I click on said stream, no messages showed up. I made sure the input does have messages coming in. Is there anything I am missing?

7

@jochen nevermind, I figured it out! Thanks!

8

For the record, just new messages will be assigned to the new stream. Existing messages from that input will not appear in the newly created stream.

9

@jochen Got it! Thanks a lot!!

10

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.