All Apps and Add-ons

Cloud Splunk Add-on for Unix and Linux addon configure failing due to not having edit_monitor and edit_scripted

janakap
Engager

Hi, 

I installed Splunk Add-on for Unix and Linux addon in Splunk Cloud. During the initial configuration of the add-on it gives the error "There was an unexpected problem while saving the inputs. Please reload the page and try again." when trying to save the configuration.

Looking at the http request errors I found that not having edit_monitor and edit_scripted permissions seems to be the problem 

example error: [SPLUNKD] You (user=sc_admin) do not have permission to perform this operation (requires capability: edit_scripted).

In the user and role permission settings,  I didn't find these permissions to be set to the related role. 

Appreciate any help to solve the issue or any workarounds. 

Thanks,

Janaka

Labels (1)
Tags (2)

VatsalJagani
SplunkTrust
SplunkTrust

@janakap , @figmentbritton  - That could be due to you trying to create/enable input which is generally not allowed on Splunk cloud SH and Indexers.

You can create input in the cloud IDM (Input Data Manager) instance only. - https://www.splunk.com/en_us/blog/platform/introducing-inputs-data-manager-on-splunk-cloud.html?loca... 

--------------
I hope this helps!!!

0 Karma

figmentbritton
Engager

I'm having the same issue - is it possible to enable these permissions in Splunk Cloud?

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...