virustotal command is unavailable for non-admin user
Hi Adarma,
I am planning to use VirusTotal TA in my Splunk cloud env. I have configured it but the issue I am getting is only admin user can run virustotal command and I think it is due to below settings.
[commands/virustotal] export = system access = read : [ admin, sc_admin, power ], write : [ admin, sc_admin ]
When I am trying to modify permission (add write permission to non-admin user) to the virustotal command via GUI I am getting below error. Could you please suggest any solution to fix this. Do I need to change metadata/default.meta file and then upload the TA as private.
Error: Splunk could not update permissions for resource data/commands [HTTP 500] Splunkd internal error; [{'type': 'ERROR', 'code': None, 'text': "This handler does not support the 'edit' action and cannot be used for ACL modification."}]
Thanks