When installing hadoop connect and assigning a user to "hc_admin" role I get the error "Unknown search command 'hdfs'" when trying to run the command (I know it's not a "complete" command, just trying to make sure it finds the command.)
| hdfs
If I add the capability of "admin_all_objects" to the hc_admin role then it starts to work and tells me missing directives which is expected since the command is not fully built.
Question is how do I do grant the proper permissions for this role without granting "admin_all_objects"?
Thanks!
By default I see ' user ' + 3 capabilities
[root@localhost default]# pwd
/opt/splunk/etc/apps/HadoopConnect/default
[root@localhost default]# more authorize.conf
[capability::hc_read]
[capability::hc_write]
[role_hc_admin]
importRoles = user
hc_read = enabled
hc_write = enabled
schedule_search = enabled