topic Re: Python code please to modify alert permissions (owner, app and sharing) using splunklib SDK ? in Alerting

Python code please to modify alert permissions (owner, app and sharing) using splunklib SDK ?

dhiren051 — Thu, 12 Apr 2018 18:34:01 GMT

Created splunk search and alert using splunklib.client python module but not able to find a way to modify alert owner, app and sharing parameters.please help with sample python code.

Re: Python code please to modify alert permissions (owner, app and sharing) using splunklib SDK ?

somesoni2 — Thu, 12 Apr 2018 18:44:44 GMT

See if this link helps:

https://answers.splunk.com/answers/509056/how-do-you-change-the-owner-of-a-saved-search-usin-1.html

Re: Python code please to modify alert permissions (owner, app and sharing) using splunklib SDK ?

dhiren051 — Tue, 29 Sep 2020 18:59:40 GMT

I tried that link but got error 404 - my last 3 updated lines are:

url ="/servicesNS/nobody/system/{0}/acl".format(my_saved_search_name)

Note: since i created alert via splunklib , it got created with -- owner=nobody, app=system and sharing=global

params: {'sharing':'app'}
sendrequest (params, server, url)

Also, I tried java code example from below link, but not sure how do i use kwargs here in python :
https://answers.splunk.com/answers/143030/sharing-an-object-to-an-app-and-modifying-its-permission-using-java-sdk.html

tried other several links from this blog - able to ran few of it in python but don't see any change in splunk UI.

Re: Python code please to modify alert permissions (owner, app and sharing) using splunklib SDK ?

damien_chillet — Fri, 13 Apr 2018 10:22:43 GMT

Managed to play with search permissions with the following sample:

import urllib

url = 'http://admin:changeme@localhost:8089/servicesNS/nobody/poc/saved/searches/some_search/acl'
data = urllib.urlencode({'sharing': 'global', 'owner': 'admin'})

urllib.urlopen(url, data)

Re: Python code please to modify alert permissions (owner, app and sharing) using splunklib SDK ?

harimadambi — Wed, 09 Sep 2020 05:21:49 GMT

import requests

data = {
'owner' : '<owner>',
'sharing' : '<app/global/system>',
'perms.read' : '*',
'perms.write' : 'admin,power'
}

url = 'https://<hostname>:8089/services/apps/local/test_app/acl'
response = requests.post(url, data=data, verify=False, auth=('admin', '<password>'))