What permission / capability do I need to create KV store collection?

Path Finder

Hi all, when the user tries to create a KV store collection through Lookup Editor, he got the error You do not have permission to make a KV store collection, even though he is a poweruser.

What capability do I need to add so that he can create a KV store lookup? Thanks,


You need admin_all_objects to create a lookup. I find it surprising that Splunk requires a user to have such a level just to make a collection.

BTW: I'm going to make this clearer in the Lookup Editor app.

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!