What is the capability so the user will be able to upload file with "add data" option ?

[sarit_s]

Hello

what is the capability so the user will be able to upload file with "add data" option ?

[splunkreal]

Hello @sarit_s did you try these :

edit_monitor - Required to make the "Add Data" option show up in the settings menu.
indexes_edit - Required to make the users index name show up in the Indexes drop down when uploading the file.
edit_tcp - Required to get the file to actually upload. Without this capability the file upload would hang.
search - Required so the user can preview the uploaded file.

From https://community.splunk.com/t5/Getting-Data-In/Capability-to-upload-data-files-via-the-gui-for-a-us...

Thanks.

[sarit_s]

Hello

In the cloud there is "edit_tcp_stream" capability, there is no edit_tcp

edit_monitor is already enabled

I don't want to give the user permission to edit something else, only to enable the upload option