Deployment Architecture

What capability is needed to create a new index?

marcusnilssonmr
Path Finder

What capability is needed to create a new index? There is a capability for editing an index, is that used for creation as well?

Tags (1)
0 Karma

jensonthottian
Contributor

I think using indexes_edit capability you would be able to change settings related to an index(file size and memory limits) and not create a new index. But I am not sure which specific capability gets you access to create a new index in Splunk web (maybe try with this edit_web_settings ).

Can you try with first indexes_edit capability and let us know your results.

0 Karma

srikanth1213
Path Finder

Hi jensonthottian , did you find any other capability apart from "indexes_edit " that one would require to create/edit index?

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...