All Apps and Add-ons

Cloud Splunk Add-on for Unix and Linux addon configure failing due to not having edit_monitor and edit_scripted

janakap
Engager

Hi, 

I installed Splunk Add-on for Unix and Linux addon in Splunk Cloud. During the initial configuration of the add-on it gives the error "There was an unexpected problem while saving the inputs. Please reload the page and try again." when trying to save the configuration.

Looking at the http request errors I found that not having edit_monitor and edit_scripted permissions seems to be the problem 

example error: [SPLUNKD] You (user=sc_admin) do not have permission to perform this operation (requires capability: edit_scripted).

In the user and role permission settings,  I didn't find these permissions to be set to the related role. 

Appreciate any help to solve the issue or any workarounds. 

Thanks,

Janaka

Labels (1)
Tags (2)

VatsalJagani
SplunkTrust
SplunkTrust

@janakap , @figmentbritton  - That could be due to you trying to create/enable input which is generally not allowed on Splunk cloud SH and Indexers.

You can create input in the cloud IDM (Input Data Manager) instance only. - https://www.splunk.com/en_us/blog/platform/introducing-inputs-data-manager-on-splunk-cloud.html?loca... 

--------------
I hope this helps!!!

0 Karma

figmentbritton
Engager

I'm having the same issue - is it possible to enable these permissions in Splunk Cloud?

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...