Hi,
I'm having an issue uploading files to Splunk as a particular user. When I attempt the upload process, the progress bar hangs at 100% and never completes, and searching confirms that the data has not been added. No error is logged.
This only occurs when attempting to add it as my custom role. This role inherits the default "user" capabilities, and also has the "edit_monitor" and "indexes_edit" capabilities.
Uploading the same file as an admin does not have this issue, and the upload completes instantly. Is there a capability missing that might be causing this?
Found the answer to this: the user needs to have the "edit_tcp" capability. I'm not sure why that's required to upload a file, but granting it to the user solved the problem.
Found the answer to this: the user needs to have the "edit_tcp" capability. I'm not sure why that's required to upload a file, but granting it to the user solved the problem.
Worked for me. Thank you
I have seen this where you exceed the disk space limit in server.conf (SPL-109362), is there any difference in this setting between your two users?
How can this value be set differently for different users? I was under the impression the setting in server.conf was a global setting.
What version are you on ?
I'm on version 6.2.5