Hello splunkers,
I need your help to properly configure VirusTotal TA 2.0.0 (https://splunkbase.splunk.com/app/4283/) - it works fine for admin role, but not power user - even though permissions are configured
./metadata/ .meta
[commands/virustotal]
export = system
access = read : [ admin, power ], write : [ admin ]
I played with those, but it didn't help:
[commands/virustotal]
export = system
access = read : [ admin, power ], write : [ admin, power ]
But still getting errors for power user:
07-15-2020 17:15:40.008 +1000 ERROR ChunkedExternProcessor - stderr: AuthenticationError at "/opt/splunk/etc/apps/TA-VirusTotal/bin/splunklib/binding.py", line 303 : Request failed: Session is not logged in.
07-15-2020 17:15:40.008 +1000 ERROR ChunkedExternProcessor - stderr: File "/opt/splunk/etc/apps/TA-VirusTotal/bin/splunklib/searchcommands/search_command.py", line 740, in _process_protocol_v2
07-15-2020 17:15:40.008 +1000 ERROR ChunkedExternProcessor - stderr: File "/opt/splunk/etc/apps/TA-VirusTotal/bin/virustotal.py", line 539, in prepare
07-15-2020 17:15:40.008 +1000 ERROR ChunkedExternProcessor - stderr: File "/opt/splunk/etc/apps/TA-VirusTotal/bin/splunklib/client.py", line 1262, in __iter__
07-15-2020 17:15:40.008 +1000 ERROR ChunkedExternProcessor - stderr: File "/opt/splunk/etc/apps/TA-VirusTotal/bin/splunklib/client.py", line 1425, in iter
07-15-2020 17:15:40.008 +1000 ERROR ChunkedExternProcessor - stderr: File "/opt/splunk/etc/apps/TA-VirusTotal/bin/splunklib/client.py", line 1655, in get
07-15-2020 17:15:40.008 +1000 ERROR ChunkedExternProcessor - stderr: File "/opt/splunk/etc/apps/TA-VirusTotal/bin/splunklib/client.py", line 753, in get
07-15-2020 17:15:40.008 +1000 ERROR ChunkedExternProcessor - stderr: File "/opt/splunk/etc/apps/TA-VirusTotal/bin/splunklib/binding.py", line 303, in wrapper
