Getting Data In

Is it possible to create a service account just to authenticate to Splunk API for conf editing?

Log_wrangler
Builder

I am reading thru users, roles, and permissions documentation but not sure how to set this up.

Ideally I want an account (user/pwd) that can authenticate to Splunk api and only change .confs within a certain app...

Wondering if that is possible.

Thank you

0 Karma
1 Solution

Log_wrangler
Builder

So I create an account with all the rest_* capabilities but it looks like you still need admin_all_objects...

View solution in original post

0 Karma

Log_wrangler
Builder

So I create an account with all the rest_* capabilities but it looks like you still need admin_all_objects...

View solution in original post

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!