What permissions are needed to make the Splunk integration work in 12.4.2?

Question

Question by Brian C. · May 31, 2016 at 01:39 PM · nam server

What permissions are needed to make the Splunk integration work in 12.4.2?

I am trying to get the Splunk integration working with my 12.4.2 system and the Dcrum CAS app for splunk, but it seems it will not work unless the account used for the Data input section has Administrator credentials. Is that by design? I know the REST stuff will work with lesser permissions.

Any body have a similar experience with this?

Thanks,

Brian

0

10 |2000000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

Answer 1 · 2016-06-01T11:52:36Z

Best Answer

Answer by Lukasz K. · Jun 01, 2016 at 11:52 AM

Hello Brian,

Yes, this is by design. The reasoning was that using this feature you are able to export any data from CAS server so you need to have high enough privileges to get into the API.

Is accessing CAS from Splunk with administrator privileges a problem in your case? Can you elaborate on this?

Regards,

luke

0 · Share

10 |2000000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

Answer 2 · 2017-10-20T12:29:17Z

Answer by Nikolay S. · Oct 20, 2017 at 12:29 PM

Hello gents! Could you please answer: how to encode password to protect it?

Thank you!

0 · Share

10 |2000000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

Answer 3 · 2016-06-01T13:19:35Z

Answer by Brian C. · Jun 01, 2016 at 01:19 PM

I really don't like having a report being run by a Administrator account. I have to provide the account to my Splunk team to setup the app, so now I have a team with an account that allows them to make changes to the DCRUM system. This is a really poor design in my opinion, and will probably cause me to abandon the solution.

Thanks,

Brian

0 · Share

10 |2000000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

What permissions are needed to make the Splunk integration work in 12.4.2?

3 Replies

Join the conversation!

NAM 2019 SP3 is available

LIVE WEBINAR

Follow this Question

Related Questions

Forum Tags