Security

What permission / capability do I need to create KV store collection?

Motoko89
Path Finder

Hi all, when the user tries to create a KV store collection through Lookup Editor, he got the error You do not have permission to make a KV store collection, even though he is a poweruser.

What capability do I need to add so that he can create a KV store lookup? Thanks,

AnilPujar
Path Finder

what capability do we need to just read content or data from kvstore?

0 Karma

AnilPujar
Path Finder

I don't want to give admin_all_objects capability to just read data from kvstore, is there any other capability name? which does this function?

0 Karma

LukeMurphey
Champion

You need admin_all_objects to create a lookup. I find it surprising that Splunk requires a user to have such a level just to make a collection.

BTW: I'm going to make this clearer in the Lookup Editor app.

0 Karma

AnilPujar
Path Finder

Will this issue be addressed by Splunk in the latest releases?

It's not good to give admin all objects privileges to just read kvstore data.

Thanks

Anil

0 Karma
Get Updates on the Splunk Community!

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Combine Multiline Logs into a Single Event with SOCK: a Step-by-Step Guide for ...

Combine multiline logs into a single event with SOCK - a step-by-step guide for newbies Olga Malita The ...

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...