Hello All,
i have a request where users will add their data(csv) manually every day. we are using splunk cloud version and which capabilities needs to be provisioned for this users.I found edit_monitor in few solutions but this capability is not found in splunk cloud. Is this the same as edit_upload_and_index. Do any other capabilities also needs to be added?
waiting for the help.
thanks
edit_tcp_stream
edit_upload_and_index
input_file
search
were the needed capabilities to show the "Add Data" button under Settings in Splunk Cloud, specifically.
I think the only ones you really do need though are "edit_upload_and_index" and "search" - specifying the indexes available at the role level did limit the shown indexes in the drop-down when going through the add data workflow.