https://community.splunk.com/t5/Getting-Data-In/Cannot-delete-from-command-line/m-p/20942#M3085 <P>Yes, I checked that as well. As stated, this was fine in 4.2, and I did not change the user account.</P> Fri, 06 Apr 2012 15:08:03 GMT jgauthier 2012-04-06T15:08:03Z https://community.splunk.com/t5/Getting-Data-In/Cannot-delete-from-command-line/m-p/20940#M3083 <P>I recently upgraded from 4.2 to 4.3. Since then, I cannot delete from a remote command line.</P> <P>sourcetype="dontcare" | delete</P> <P>Returns:<BR /> Login failed<BR /> Unauthorized</P> <P>I am using a shell script to remotely connect to a remote windows splunk server. <BR /> This worked with 4.2, and I am passing the credentials on the command line.</P> <P>Since 4.3, it does not work.</P> Fri, 06 Apr 2012 13:53:45 GMT https://community.splunk.com/t5/Getting-Data-In/Cannot-delete-from-command-line/m-p/20940#M3083 jgauthier 2012-04-06T13:53:45Z https://community.splunk.com/t5/Getting-Data-In/Cannot-delete-from-command-line/m-p/20941#M3084 <P>If you've verified that the username and password are correct (Login failed?!), that user role may not have the "delete_by_keyword" capability. By default, this is assigned to the "can_delete" role, but <STRONG>not</STRONG> the "admin" role.</P> Fri, 06 Apr 2012 14:44:29 GMT https://community.splunk.com/t5/Getting-Data-In/Cannot-delete-from-command-line/m-p/20941#M3084 sowings 2012-04-06T14:44:29Z https://community.splunk.com/t5/Getting-Data-In/Cannot-delete-from-command-line/m-p/20942#M3085 <P>Yes, I checked that as well. As stated, this was fine in 4.2, and I did not change the user account.</P> Fri, 06 Apr 2012 15:08:03 GMT https://community.splunk.com/t5/Getting-Data-In/Cannot-delete-from-command-line/m-p/20942#M3085 jgauthier 2012-04-06T15:08:03Z