Splunk Enterprise

Getting "Action forbidden" error when going to "https://<hostname>/en-US/app/search/analytics_workspace" on Splunk Cloud

rahusri2
Path Finder

Hello,

Getting Action forbidden error when going to "https://<hostname>/en-US/app/search/analytics_workspace" on Splunk Cloud.

Please note: I have logged with sc_admin role.

Screenshot 2024-12-10 at 12.05.07 PM.png

Thanks

Labels (2)
0 Karma

sainag_splunk
Splunk Employee
Splunk Employee

@rahusri2 This could be a bug in the REST endpoint on the backend '/servicesNS/admin/search/server/info' for that version/build. Are you using Splunk Cloud Trial? It's recommended to reach out to Splunk Support if this is happening in your production environment.





If this helps, Please Upvote.

 

If this helps, Upvote!!!!
Together we make the Splunk Community stronger 

rahusri2
Path Finder

Hello @sainag_splunk,

Thanks for sharing the information.

Yes, I am currently using Splunk Cloud Trial version for my POC work.

Thanks.

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...