On October 30, 2022, all 1.2.x versions of the Splunk Data Stream Processor will reach its end of support date. See the Splunk Software Support Policy for details.
Allow DSP users to use the Forwarders service
By default, tenant administrators have permissions to use the Forwarders service. Perform the following steps to grant permissions to another user in your tenant to send data using the Forwarders service.
- Ask the user you want to grant permissions to for their token UUID.
- Ask the user to log in to the Splunk Cloud Services CLI:
./scloud login
SCloud doesn't return your login metadata or access token. If you want to see your access token you must log in to SCloud using the verbose flag:
./scloud login --verbose
. - Ask the user to run the following Splunk Cloud Services CLI command and send you their UUID:
./scloud identity validate-token
- Ask the user to log in to the Splunk Cloud Services CLI:
- Create a new group to give permissions to.
./scloud identity create-group <groupName>
- Create a new role to give permissions to.
./scloud identity create-role <roleName>
- Add write, read, and delete permissions to the role that you created or to the pre-existing role.
- To add write permissions, type the following command:
./scloud identity add-role-permission <roleName> default:*:forwarders.certificate.write
- To add read permissions, type the following command:
./scloud identity add-role-permission <roleName> default:*:forwarders.certificate.read
- To add delete permissions, type the following command:
./scloud identity add-role-permission <roleName> default:*:forwarders.certificate.delete
- To add write permissions, type the following command:
- Add the role to the group that you created.
./scloud identity add-group-role <groupName> <roleName>
- Add the user to the group.
./scloud identity add-group-member <groupName> <user-UUID>
Create a connection between a Splunk forwarder and the Forwarders service | Process data from a universal forwarder in DSP |
This documentation applies to the following versions of Splunk® Data Stream Processor: 1.2.0, 1.2.1-patch02, 1.2.1, 1.2.2-patch02, 1.2.4, 1.2.5, 1.3.0, 1.3.1, 1.4.0, 1.4.1, 1.4.2, 1.4.3, 1.4.4, 1.4.5
Feedback submitted, thanks!