Skip to main content
Sumo Logic

Share Dashboards

Sharing Dashboards allows other people to share the insights on the current state of the data that you're uploading to Sumo Logic. You can share Dashboards with other people in your organization or people outside your organization. Sharing outside your organization is always view-only. 

When you share or publish a Dashboard, the default is that users will see exactly the same view as the person who created the Dashboard.  If the user viewing the Dashboard has different RBAC permissions than the owner, the user will temporarily assume the RBAC permissions of the owner when they're viewing the Dashboard.

An advanced setting is available if you want to change the view so that the permissions of the person with whom the Dashboard has been shared are used. With the advanced setting, the user’s own permissions are used, and they might see different data than the owner.

Share a Dashboard within your organization

  1. Click the Share icon in the Dashboard.

  2. In the Share Dashboard dialog box, select Your Organization. When you select this link, the Shareable Link and Advanced headings are displayed.

  3. Click Advanced.
    The Share Dashboard with your level of data access checkbox is displayed and shown as selected. With this default option, users will see exactly the same view as the person who created the Dashboard. If you deselect the checkbox and click Done, the user’s own permissions are used, and they might see different data than the owner.

Share Dashboards outside your organization

Dashboards often contain sensitive information, so the typical sharing model is for users to keep Dashboards private or share them only with people in their organization. But in some cases, you might want to allow people outside your organization to view a Dashboard without logging in, for example if your Dashboard is displayed on a monitor in your operations center.

To be sensitive to security concerns, several steps are required to allow sharing of Dashboards outside your organization:

  1. An administrator must first enable the policy on the Manage > Security > Sumo Logic Policies tab. See Enable the Sumo Logic policy. It can take up to 5 minutes for this policy to go in effect. 
  2. (Optional) An administrator can enable the Whitelist for Dashboards under Manage > Security > Service Whitelist Settings. Doing so will allow dashboards to be shared to users without a login provided that they are accessing it from IPs or CIDRs within the whitelist. See Enable the service whitelist in this topic.
  3. The user who creates the Dashboard must have the Share Dashboards Outside of Organization role capability
  4. The user must select the desired sharing option in the Share Dashboard dialog box ("The whitelist" or "The world"). 

Enable the Sumo Logic policy

Administrator privileges are required to enable the policy. The administrator can use the check box at any time to immediately enable or disable any viewing of any shared Dashboards outside the organization without login.

  1. Go to Manage > Security.
  2. Select the Sumo Logic Policies tab.
  3. Select  the Enable check box for Share Dashboards Outside of the Organization.
  4. Click Save.
    It can take up to 5 minutes for the policy to go in effect.

Enable the service whitelist

Administrator privileges are required to enable the service whitelist. Enabling the service whitelist is required only if you want to provide a list of IPs or CIDRs that are able to view the Dashboards without logging in.

  1. Go to Manage > Security.
  2. Select the Service Whitelist Settings tab.
  3. Under Service Whitelist Settings, select Enable Dashboard Whitelist.
  4. Copy and paste an IP address you want to share with in the IP Address or CIDR text box, and click Add. Repeat until you've added all the addresses you'd like to include. 
  5. Click Save.

Assign the role capability

The Manage users and roles capability is required to create or modify roles and users.

  1. Go to Manage > Roles.
  2. Find an appropriate existing role or create a new role that has the Share Dashboards Outside of Organization capability.  See Create a New Role
  3. Assign the role to the user who will be sharing the Dashboards. See Assign Roles to Users.

Share the Dashboard

Click the Sharing icon in the Dashboard.

Select one of the following options and click Save.

  • The whitelist. All addresses listed in the Service Whitelist Settings under Manage > Security can view the Dashboard without logging in. 
  • The world. Everyone who accesses the shareable link can view the Dashboard without logging in. 

The  sharing symbol in the Dashboard changes to a globe to indicate that the Dashboard is now shared outside your organization.

dashboard share world.png

Restrictions and known limitations

  • Sharing a dashboard with the whitelist or the world will place the dashboard into live mode for the viewer. It may take several minutes for panels to load data depending on your queries and timeranges.
  • Panels that are incompatible with live mode show data only for viewers who have a login. 
  • Panels must use relative time ranges (e.g., Last 15 Minutes, Last 24 Hours). Absolute time ranges are not currently supported.
  • Viewers without a login will see a live version of the dashboard with any default time ranges and filters applied. To specify a different set of filters for another viewer, you will need to create a copy of this dashboard, provide new filter values and share it with the new URL.

Logging

If you have the Audit Index enabled, the following information is logged.

When a user shares a dashboard outside of the organization:

  • Dashboard name
  • Dashboard URL
  • Owner name
  • Owner email
  • Visibility (“world” or “whitelist”)

When someone views a dashboard without signing in:

  • Dashboard name
  • Dashboard URL
  • Owner name
  • Owner email
  • Visibility (“world” or “whitelist”)
  • Viewer’s IP address

Alerts and reports

You can use Scheduled Searches to create alerts and reports on sharing Dashboards outside your organization.

Examples: 

Real-time alert when a user shares a Dashboard

_view=sumologic_audit and _sourceName=REPORT "Published REPORT"
| parse "Published REPORT Name=*, UserName=* UserEmail=*} PublisherName=* PublisherEmail=*} Visibility=* URL=*" as dashboardName,userName,userEmail,publisherName,publisherEmail,visibility, URL
| count by dashboardName, userName, userEmail, visibility, URL
| fields -_count


Scheduled Search report of Dashboard views
_view=sumologic_audit and _sourceName=REPORT "Viewed Report"
| parse "Name=*, Id=Some(*)," as dashboardName,dashboardId
| parse "URL=*, ViewerIP=*" as url,viewerip
| count

Visualization of Dashboard views by geography
_view=sumologic_audit and _sourceName=REPORT "Viewed Report"
| parse "Name=*, Id=Some(*)," as dashboardName,dashboardId
| parse "URL=*, ViewerIP=*" as url,viewerip
| lookup latitude, longitude from geo://default on ip=viewerip 
| count by latitude, longitude
| sort _count