All Apps and Add-ons

VirusTotal Malware Lookup for Splunk (TA-VirusTotal) 2.0.0 permissions issue for power user role

alexeyglukhov
Path Finder

Hello splunkers,

I need your help to properly configure VirusTotal TA 2.0.0 (https://splunkbase.splunk.com/app/4283/) - it works fine for admin role, but not power user - even though permissions are configured

./metadata/ .meta

[commands/virustotal]
export = system
access = read : [ admin, power ], write : [ admin ]

I played with those, but it didn't help:

[commands/virustotal]
export = system
access = read : [ admin, power ], write : [ admin, power ]

But still getting errors for power user:
07-15-2020 17:15:40.008 +1000 ERROR ChunkedExternProcessor - stderr: AuthenticationError at "/opt/splunk/etc/apps/TA-VirusTotal/bin/splunklib/binding.py", line 303 : Request failed: Session is not logged in.
07-15-2020 17:15:40.008 +1000 ERROR ChunkedExternProcessor - stderr: File "/opt/splunk/etc/apps/TA-VirusTotal/bin/splunklib/searchcommands/search_command.py", line 740, in _process_protocol_v2
07-15-2020 17:15:40.008 +1000 ERROR ChunkedExternProcessor - stderr: File "/opt/splunk/etc/apps/TA-VirusTotal/bin/virustotal.py", line 539, in prepare
07-15-2020 17:15:40.008 +1000 ERROR ChunkedExternProcessor - stderr: File "/opt/splunk/etc/apps/TA-VirusTotal/bin/splunklib/client.py", line 1262, in __iter__
07-15-2020 17:15:40.008 +1000 ERROR ChunkedExternProcessor - stderr: File "/opt/splunk/etc/apps/TA-VirusTotal/bin/splunklib/client.py", line 1425, in iter
07-15-2020 17:15:40.008 +1000 ERROR ChunkedExternProcessor - stderr: File "/opt/splunk/etc/apps/TA-VirusTotal/bin/splunklib/client.py", line 1655, in get
07-15-2020 17:15:40.008 +1000 ERROR ChunkedExternProcessor - stderr: File "/opt/splunk/etc/apps/TA-VirusTotal/bin/splunklib/client.py", line 753, in get
07-15-2020 17:15:40.008 +1000 ERROR ChunkedExternProcessor - stderr: File "/opt/splunk/etc/apps/TA-VirusTotal/bin/splunklib/binding.py", line 303, in wrapper

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Index This | What’s a riddle wrapped in an enigma?

September 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

BORE at .conf25

Boss Of Regular Expression (BORE) was an interactive session run again this year at .conf25 by the brilliant ...

OpenTelemetry for Legacy Apps? Yes, You Can!

This article is a follow-up to my previous article posted on the OpenTelemetry Blog, "Your Critical Legacy App ...