Hello @SanjayReddy tried crossing 1 hurdle.. so, our environment is a cluster environment with few search heads and few indexers, a Cluster master and Deployer. so i created user on search head and that was the reason i was able to login to splunk GUI, but not able to enable the maintenance mode on CM. so i have created the same role and user on cluster master and tried executing the maintenance mode , it did get executed, but now with different error, i have provided edit_indexer_cluster capability, still getting the error, not sure why...., any insights Your session is invalid. Please login. Splunk username: testuser Password: You (user=testuser) do not have permission to perform this operation (requires capability: edit_indexer_cluster).
... View more