<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic access problem for delte command ?? in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/access-problem-for-delte-command/m-p/50177#M9539</link>
    <description>&lt;P&gt;Hi ..&lt;/P&gt;

&lt;P&gt;For the Splunk default admin login also , i am getting this error &lt;BR /&gt;
"#Error in 'delete' command: You have insufficient privileges to delete events" , &lt;BR /&gt;
when i use the delete command .. What settings i have to change to get rid of this error ??.&lt;/P&gt;

&lt;P&gt;please help thanx. &lt;/P&gt;</description>
    <pubDate>Tue, 04 Sep 2012 06:58:21 GMT</pubDate>
    <dc:creator>rakesh_498115</dc:creator>
    <dc:date>2012-09-04T06:58:21Z</dc:date>
    <item>
      <title>access problem for delte command ??</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/access-problem-for-delte-command/m-p/50177#M9539</link>
      <description>&lt;P&gt;Hi ..&lt;/P&gt;

&lt;P&gt;For the Splunk default admin login also , i am getting this error &lt;BR /&gt;
"#Error in 'delete' command: You have insufficient privileges to delete events" , &lt;BR /&gt;
when i use the delete command .. What settings i have to change to get rid of this error ??.&lt;/P&gt;

&lt;P&gt;please help thanx. &lt;/P&gt;</description>
      <pubDate>Tue, 04 Sep 2012 06:58:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/access-problem-for-delte-command/m-p/50177#M9539</guid>
      <dc:creator>rakesh_498115</dc:creator>
      <dc:date>2012-09-04T06:58:21Z</dc:date>
    </item>
    <item>
      <title>Re: access problem for delte command ??</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/access-problem-for-delte-command/m-p/50178#M9540</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;The delete command requires special privileges, which aren't granted to anyone by default, not even admin. Check the &lt;A href="http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Delete"&gt;documentation for the delete command&lt;/A&gt;. The reason is that the delete command is destructive and irrevokable.&lt;/P&gt;

&lt;P&gt;You can grant a user the &lt;CODE&gt;can_delete&lt;/CODE&gt; role to enable deleting. It is highly recommended that you do this only temporarily for a specific user and remove the role immediately when you're finished deleting.&lt;/P&gt;</description>
      <pubDate>Tue, 04 Sep 2012 07:32:41 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/access-problem-for-delte-command/m-p/50178#M9540</guid>
      <dc:creator>echalex</dc:creator>
      <dc:date>2012-09-04T07:32:41Z</dc:date>
    </item>
  </channel>
</rss>

