Splunk Search

How to change sharing and permissions for a lookup table using the REST API?

polymorphic
Communicator

I need to change sharing and permissions for a lookup table file using the REST API.

I have been searching high and low for documentation, but I have been unable to find anything.

Does anyone have an idea how this is done?

1 Solution

polymorphic
Communicator

Got it:

curl -k -u admin:password http://localhost:8089/servicesNS/js/search/data/lookup-table-files/lookup.csv/acl -d owner=js -d sharing=app -d perms.read=* -d perms.write=*

View solution in original post

kartik13
Communicator

Then i suppose through this url i can change the permission, please correct me if i am wrong
https://localhost:8089/servicesNS/ks/search/saved/fvtags/host=hostvalue/acl

0 Karma

kartik13
Communicator

Then i suppose through this url i can change the permission, please correct me if i am wrong
https://localhost:8089/servicesNS/ks/search/saved/fvtags/host=hostvalue/acl

0 Karma

polymorphic
Communicator

appending /acl (curl -k -u admin:password https://localhost:8089/servicesNS/js/search/data/lookup-table-files/lookup.csv/acl -d owner=js -d sharing=app) seems to do the trick for owner and sharing, but i havent found the param for read and write access.
Anyone?

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...