All Apps and Add-ons

Cloud Splunk Add-on for Unix and Linux addon configure failing due to not having edit_monitor and edit_scripted

janakap
Engager

Hi, 

I installed Splunk Add-on for Unix and Linux addon in Splunk Cloud. During the initial configuration of the add-on it gives the error "There was an unexpected problem while saving the inputs. Please reload the page and try again." when trying to save the configuration.

Looking at the http request errors I found that not having edit_monitor and edit_scripted permissions seems to be the problem 

example error: [SPLUNKD] You (user=sc_admin) do not have permission to perform this operation (requires capability: edit_scripted).

In the user and role permission settings,  I didn't find these permissions to be set to the related role. 

Appreciate any help to solve the issue or any workarounds. 

Thanks,

Janaka

Labels (1)
Tags (2)

VatsalJagani
SplunkTrust
SplunkTrust

@janakap , @figmentbritton  - That could be due to you trying to create/enable input which is generally not allowed on Splunk cloud SH and Indexers.

You can create input in the cloud IDM (Input Data Manager) instance only. - https://www.splunk.com/en_us/blog/platform/introducing-inputs-data-manager-on-splunk-cloud.html?loca... 

--------------
I hope this helps!!!

0 Karma

figmentbritton
Engager

I'm having the same issue - is it possible to enable these permissions in Splunk Cloud?

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...