All Apps and Add-ons

Qualys Technical Add-On Setup Page Not Loading on Inputs Data Manager.

JoeAdkins
Observer

We use the Qualys Technical Add-On to pull vulnerability data into Splunk. We run it on our Inputs Data Manager We'd like to include additional fields in our data pulls, but in order to do that we need to go to the setup page. When going to the setup page on the IDM it never loads and we see this data in web_service.log

2024-09-03 21:26:32,726 INFO  __init__:654 - Authorization Failed: b'{"messages":[{"type":"ERROR","text":"You (user=myusername) do not have permission to perform this operation (requires capability: edit_telemetry_settings)."}]}'

From what I've been told edit_telemetry_settings can only be assigned to admins, not sc_admins. So no one has access to get to the setup page. 

Qualys is telling me that they have others users with IDMs that are using the Qualys TA fine, but our issue has persisted across restarts, multiple environments and multiple TA versions.

Can anyone confirm they can load the setup for the Qualys TA page from an IDM?

JoeAdkins_1-1725401296230.png

 

 

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...