Getting Data In

How can i change the permissions of dynamically created Tags through REST API ?

kartik13
Communicator

Searched for answers, but couldn't figure it out.
The closest answer was:
how-to-change-sharing-and-permissions-for-a-lookup

I am using Splunk version 6

Any help in this matter is appreciated.

Thanks in advance

0 Karma
1 Solution

kartik13
Communicator

Got the answer finally :
You can update the permission of tags through REST API having a POST request at the following url and parameters:

https://localhost:8089/servicesNS/ks/search/saved/fvtags/tag_name/field%3Dvalue/acl -d owner="ks" -d sharing="app" -d perms.read="*" -d perms.write="*"

View solution in original post

kartik13
Communicator

Got the answer finally :
You can update the permission of tags through REST API having a POST request at the following url and parameters:

https://localhost:8089/servicesNS/ks/search/saved/fvtags/tag_name/field%3Dvalue/acl -d owner="ks" -d sharing="app" -d perms.read="*" -d perms.write="*"

jayannah
Builder

Hi

You will find answers for your queries in the below URLs..
https://answers.splunk.com/answers/345286/change-tag-permission-via-rest-api-curl.html
https://answers.splunk.com/answers/13189/setting-tag-values-through-rest-api.html

Also, if you want to change permission of any other object, check the below URL for details & examples.
http://docs.splunk.com/Documentation/Splunk/6.3.3/RESTUM/RESTusing#Access_Control_List

0 Karma

kartik13
Communicator

tried most of them ..didn't get any kind of success. In to documentation of ACL it is written many APi are supported but not all i suppose .So in that case can i change the permissions of tags ?
There is no sure answer for that anywhere , just examples .

0 Karma

somesoni2
Revered Legend

Try this

 curl -k -u admin:password http://localhost:8089/servicesNS/js/search/data/search/tags/{tag_name}/acl -d owner=js -d sharing=app -d perms.read=* -d perms.write=*
0 Karma

kartik13
Communicator

Tried this .. Its giving me unknown endpoint.

0 Karma

kartik13
Communicator
0 Karma

somesoni2
Revered Legend

Did you replace the '{tag_name}' with your tag name that you created?

0 Karma

kartik13
Communicator

yes .. for sure . In the below comment i found about this link
http://docs.splunk.com/Documentation/Splunk/latest/RESTUM/RESTusing#Access_Control_List
Here in the docs , it says many api's are supported . Is that mean not all . So can i change the permissions of tags or not

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...