Hi,
Can graylog present different views to different users? such as user A can only see messages from input 1, while user B can only see messages from input 2? What’s the best way to accomplish this goal?
Thanks,
-Li
Hi,
Can graylog present different views to different users? such as user A can only see messages from input 1, while user B can only see messages from input 2? What’s the best way to accomplish this goal?
Thanks,
-Li
Under System/Authentication you can set up Roles. With Roles you can set what streams or dashboard your users have access to (read/edit). Then just give roles to your users and you should be set.
One thing I do in my setup is to make a stream per input. Single rule of “gl2_source_input must match exactly [input_id]”. That will give you the chance to give users access to your inputs so to speak.
You could click on “Show received messages” on the System / Inputs page. This will generate a search query which contains the correct input ID.
@jochen Thanks! yeah I just figured that one out through comparing URL Now I created a stream with “gl2_source_input must match exactly [input_id]”, but when I click on said stream, no messages showed up. I made sure the input does have messages coming in. Is there anything I am missing?
For the record, just new messages will be assigned to the new stream. Existing messages from that input will not appear in the newly created stream.
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.