All Apps and Add-ons

Cb Response App for Splunk: Error "Unknown error reading API Key"

naqviah
Explorer

I am try to use a process search feature in the CB-Response app. I am receiving the following error:

error: unknown error reading api key from credential storage: http 403 forbidden -- you (user=XXXXXXX) do not have permission to perform this operation (requires capability: list_storage_passwords).

I have already checked the following:
- Account permissions - set to admin
- capability (list_storage_passwords) already added to the role
- Permissions on the app directory recursively

Not sure what I am missing out.
Any help would be appreciated.

0 Karma

carbonblack
Path Finder

We haven't seen that error in the past - we use the Splunk Password Storage REST API endpoints to store the credentials in an encrypted manner. Can you send us an email at dev-support@carbonblack.com and we can set up a shared session to try and troubleshoot what may be occurring?

Thanks
- Jason

0 Karma
Get Updates on the Splunk Community!

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...

Security Highlights | January 2023 Newsletter

January 2023 Splunk Security Essentials (SSE) 3.7.0 ReleaseThe free Splunk Security Essentials (SSE) 3.7.0 app ...

Platform Highlights | January 2023 Newsletter

 January 2023Peace on Earth and Peace of Mind With Business ResilienceAll organizations can start the new year ...