Splunk Enterprise

Asset and Identity Management dashboard NOTFOUND in Splunk ES

DaisyNguyen
Loves-to-Learn Lots

Hi all,

I'm struggling with problem that I can't find any error logs in Asset and Identity Management dashboard in Splunk Enterprise Security. It shows NOT FOUND and I see the error message behind is "You need edit_modinput_manager capability to edit information." . But I'm an admin that already have this permission. 

Hope anyone can tell me how can I fix this error. 

Thank you. 

DaisyNguyen_0-1709779448484.png

 

Labels (3)
0 Karma

kiran_panchavat
SplunkTrust
SplunkTrust

@DaisyNguyen  Hey, Ensure that you have the necessary permissions. You need the "edit_modinput_identity_manager" capability to use the Asset and Identity Management interface. Verify your role assignments and permissions in Splunk. 

Manage assets and identities in Splunk Enterprise Security - Splunk Documentation

Configure users and roles - Splunk Documentation

Did this help? If yes, please consider giving kudos, marking it as the solution, or commenting for clarification — your feedback keeps the community going!
0 Karma

DaisyNguyen
Loves-to-Learn Lots

Yeah, but`edit_modinput_identity_manager` capability is already checked in my role cause I'm administrator, but I still see this error.

DaisyNguyen_0-1709793858704.png

 

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...