All Apps and Add-ons

Cloud Splunk Add-on for Unix and Linux addon configure failing due to not having edit_monitor and edit_scripted



I installed Splunk Add-on for Unix and Linux addon in Splunk Cloud. During the initial configuration of the add-on it gives the error "There was an unexpected problem while saving the inputs. Please reload the page and try again." when trying to save the configuration.

Looking at the http request errors I found that not having edit_monitor and edit_scripted permissions seems to be the problem 

example error: [SPLUNKD] You (user=sc_admin) do not have permission to perform this operation (requires capability: edit_scripted).

In the user and role permission settings,  I didn't find these permissions to be set to the related role. 

Appreciate any help to solve the issue or any workarounds. 



Labels (1)
Tags (2)


@janakap , @figmentbritton  - That could be due to you trying to create/enable input which is generally not allowed on Splunk cloud SH and Indexers.

You can create input in the cloud IDM (Input Data Manager) instance only. - 

I hope this helps!!!

0 Karma


I'm having the same issue - is it possible to enable these permissions in Splunk Cloud?

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...