Security

When uploading a data file, why is the progress bar getting stuck at 100% for a non-admin user?

khagan
Path Finder

Hi,

I'm having an issue uploading files to Splunk as a particular user. When I attempt the upload process, the progress bar hangs at 100% and never completes, and searching confirms that the data has not been added. No error is logged.

This only occurs when attempting to add it as my custom role. This role inherits the default "user" capabilities, and also has the "edit_monitor" and "indexes_edit" capabilities.

Uploading the same file as an admin does not have this issue, and the upload completes instantly. Is there a capability missing that might be causing this?

1 Solution

khagan
Path Finder

Found the answer to this: the user needs to have the "edit_tcp" capability. I'm not sure why that's required to upload a file, but granting it to the user solved the problem.

View solution in original post

khagan
Path Finder

Found the answer to this: the user needs to have the "edit_tcp" capability. I'm not sure why that's required to upload a file, but granting it to the user solved the problem.

Roy_9
Motivator

Worked for me. Thank you

0 Karma

ChrisG
Splunk Employee
Splunk Employee

I have seen this where you exceed the disk space limit in server.conf (SPL-109362), is there any difference in this setting between your two users?

0 Karma

khagan
Path Finder

How can this value be set differently for different users? I was under the impression the setting in server.conf was a global setting.

0 Karma

yannK
Splunk Employee
Splunk Employee

What version are you on ?

0 Karma

khagan
Path Finder

I'm on version 6.2.5

0 Karma
Get Updates on the Splunk Community!

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...