Skip to main content
Sumo Logic

Share Dashboards

Sharing dashboards allows you to choose who else sees the insights you gain from uploading data to Sumo Logic. You can share dashboards with other people in your organization or people outside your organization. (Sharing outside your organization is always view-only.)

When you share or publish a dashboard, your chosen users will view the dashboard just as you do.  Even if they have different RBAC permissions than the owner, they will temporarily assume the owner's RBAC permissions to view the dashboard.

Share a dashboard within your organization

  1. Choose Share in the dashboard menu (click the Share icon in the dashboard itself in the classic UI). 
    Share 

  2. In the Share Dashboard dialog box, select Your Organization. When you select this link, the Shareable Link and Advanced headings are displayed.
    Share Dashboard 

  3. Choose whether to share the dashboard with your level of data access (click Advanced in the classic UI). If you select this option (as shown below), users will see exactly the same view as you, the creator of the dashboard, see. If the option is deselected, the user’s own permissions are used, and they might see different data than what you see.
    Share Dashboard advanced

Share dashboards outside your organization

Dashboards often contain sensitive information, so the typical sharing model is for users to keep dashboards private or share them only with people in their organization. But sometimes you may want to allow people outside your organization to view a dashboard without logging in, for example if your dashboard is displayed on a monitor in your operations center.

To be sensitive to security concerns, several steps are required to allow sharing of dashboards outside your organization:

  1. An administrator must first enable the policy on the Administration > Security > Policies page (the Sumo Logic Policies tab in the classic UI). See Enable the Sumo Logic policy. It can take up to 5 minutes for this policy to go into effect. 
  2. (Optional) An administrator can enable the whitelist for dashboards under Administration > Security > Service Whitelist Settings. Doing so will allow dashboards to be shared to users without a login provided that they are accessing it from IPs or CIDRs within the whitelist. See Enable the service whitelist in this topic.
  3. The user who creates the dashboard must have one or both of the following role capabilities:
    • Share Dashboards with the Whitelist
    • Share Dashboards with the World  
  4. The user must select the desired sharing option in the Share Dashboard dialog box ("The whitelist" or "The world"). 

Enable the Sumo Logic policy

Administrator privileges are required to enable the policy. The administrator can use the check box at any time to immediately enable or disable any viewing of any shared dashboards outside the organization without login.

  1. Go to Administration > Security > Policies (go to Manage > Security and select the Sumo Logic Policies tab in the classic UI).
  2. Select  the Enable check box for Share Dashboards Outside of the Organization.
  3. The policy is changed (click Save in the classic UI). It can take up to 5 minutes for the policy to go into effect.

Enable the service whitelist

Administrator privileges are required to enable the service whitelist. Enabling the service whitelist is required only if you want to provide a list of IPs or CIDRs that are able to view the dashboards without logging in.

  1. Go to Administration > Security > Service Whitelist Settings (go to Manage > Security and select the Service Whitelist Settings tab in the classic UI).
  2. Under Service Whitelist Settings, select Enable Dashboard Whitelist.
  3. Copy and paste an IP address you want to share with in the IP Address or CIDR text box, and click Add. Repeat until you've added all the addresses you'd like to include. 
  4. Click Save.

Assign the role capability

The Manage users and roles capability is required to create or modify roles and users.

  1. Go to Administration > Users and Roles > Roles (Manage > Roles in the classic UI).
  2. Find an appropriate existing role or create a new role that has one or both of the following capabilities. See Create a New Role
    • Share Dashboards with the Whitelist
    • Share Dashboards with the World 
  3. Assign the role to the user who will be sharing the dashboards. See Assign Roles to Users.

Share the dashboard

Choose Share in the dashboard menu (click the Share icon in the dashboard itself in the classic UI).

Share
 

Select one of the following options and click Save.

  • The whitelist. All addresses listed in the Service Whitelist Settings under Administration > Security can view the dashboard without logging in. 
  • The world. Everyone who accesses the shareable link can view the dashboard without logging in. 

Hover over the dashboard to see with whom it is shared.

Shared dashboard status

Restrictions and known limitations

  • Sharing a dashboard with the whitelist or the world will place the dashboard into live mode for the viewer. It may take several minutes for panels to load data depending on your queries and time ranges.
  • Panels that are incompatible with live mode show data only for viewers who have a login. 
  • Panels must use relative time ranges (e.g., Last 15 Minutes, Last 24 Hours). Absolute time ranges are not currently supported.
  • Viewers without a login will see a live version of the dashboard with any default time ranges and filters applied. To specify a different set of filters for another viewer, you will need to create a copy of this dashboard, provide new filter values and share it with the new URL.

Logging

If you have the Audit Index enabled, the following information is logged.

When a user shares a dashboard outside of the organization:

  • Dashboard name
  • Dashboard URL
  • Owner name
  • Owner email
  • Visibility (“world” or “whitelist”)

When someone views a dashboard without signing in:

  • Dashboard name
  • Dashboard URL
  • Owner name
  • Owner email
  • Visibility (“world” or “whitelist”)
  • Viewer’s IP address

Alerts and reports

You can use Scheduled Searches to create alerts and reports on sharing dashboards outside your organization.

Examples: 

Real-time alert when a user shares a dashboard

_view=sumologic_audit and _sourceName=REPORT "Published REPORT"
| parse "Published REPORT Name=*, UserName=* UserEmail=*} PublisherName=* PublisherEmail=*} Visibility=* URL=*" as dashboardName,userName,userEmail,publisherName,publisherEmail,visibility, URL
| count by dashboardName, userName, userEmail, visibility, URL
| fields -_count

Scheduled search report of dashboard views

_view=sumologic_audit and _sourceName=REPORT "Viewed Report"
| parse "Name=*, Id=Some(*)," as dashboardName,dashboardId
| parse "URL=*, ViewerIP=*" as url,viewerip
| count

Visualization of dashboard views by geography

_view=sumologic_audit and _sourceName=REPORT "Viewed Report"
| parse "Name=*, Id=Some(*)," as dashboardName,dashboardId
| parse "URL=*, ViewerIP=*" as url,viewerip
| lookup latitude, longitude from geo://default on ip=viewerip 
| count by latitude, longitude
| sort _count