Splunk Search

Configure Splunk Infrastructure Monitoring Add-on to give users access to sim command

las
Contributor

Hi.

 

We are just starting to use Splunk Infrastructure monitoring, and have added the "Splunk Infrastructure Monitoring Add-on".

 

We have created the connection to Splunk Observability, without any problems, and admins can run the search command "| sim flow query=..." without any problems.

 

The problem arises when a normal user is trying the same command, where we get the following error message:
"Error in "sim" command: Splunk Infrastructure Monitoring API Connection not configured."

 

I have reviewed all permissions I could think of, and except for a couple og view, there is public access. I can't find any new capabilities, that might need to be added.

 

If anyone can point me in the right direction, it would be greatly appriciated.

 

Kind regards

Labels (1)
0 Karma

dural_yyz
Motivator
# simquery command
[commands/simquery]
access = read : [ admin ], write : [ admin ]
export = system

This is the default.meta file shipped with the application.  Without additional roles added then it seems to make sense only admins can utilize the command structure as you have indicated.  I would first start with adding a role that is escalated from just the user level and verify.

0 Karma

las
Contributor

Sorry about the delay.

Unfortunately this does not seem to be the problem I have changed the local.meta to

# simquery command
[commands/simquery]
access = read : [ * ], write : [ admin ]

And restartet - that why it took so long - but I still get the same error

0 Karma
Get Updates on the Splunk Community!

Unlock New Opportunities with Splunk Education: Explore Our Latest Courses!

At Splunk Education, we’re dedicated to providing top-tier learning experiences that cater to every skill ...

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...