Splunk error in auto-complete box

Note: ! Error in search assistant: Unable to get 'searchbnf' configuration for 'search' namespace: [HTTP 403] Client is not authorized to perform requested action; https://127.0.0.1:8089/servicesNS/[username]/search/properties/searchbnf?fillcontents=1
Traceback (most recent call last): File "/opt/splunk/lib/python2.7/site-packages/splunk/searchhelp/searchhelper.py", line 112, in doHelp bnf = utils.getStanzas("searchbnf", sessionKey, user, namespace) 
File "/opt/splunk/lib/python2.7/site-packages/splunk/searchhelp/utils.py", line 117, in getStanzas raise Exception(msg) 
Exception: Unable to get 'searchbnf' configuration for 'search' namespace: [HTTP 403] 
Client is not authorized to perform requested action; https://127.0.0.1:8089/servicesNS/[username]/search/properties/searchbnf?fillcontents=1

I started getting this error on a user’s auto-complete box while trying to search in splunk because we’d failed to give them the correct capabilities.

The capabilities I had to apply were:

  • get_metadata
  • get_typeahead
  • rest_properties_get

 



#Splunk #Work