Hello,
I installed and configured the Commvault Splunk plugin available at: https://splunkbase.splunk.com/app/5718/
To respect the “least privilege” rule, I created a service account with the role “Report Management” on the Commcell to allow Splunk to retrieve the logs and jobs information.
But it doesn’t work, here are the Splunk logs generated from the plugin:
“2021-11-23 10:03:05.040906 click_result Attempting to login
2021-11-23 10:03:05.598242 click_result ERROR 106 'NoneType' object is not subscriptable”
First, I thought it was a password issue but when inserting a false password, I have another log:
“2021-11-23 10:23:08.698105 click_result Password not entered. Please give a password
2021-11-23 10:23:23.800388 click_result Attempting to login
2021-11-23 10:23:23.880586 click_result ERROR Login Failed”
I think I don’t gave enough rights to the Splunk service account to access the required information on the Commcell but I don’t want to give the “master” role to this account.
I’ve tried to find in documentation.commvault.com what is required but the only available information is about the Splunk backup agent: https://documentation.commvault.com/commvault/v11_sp20/article?p=111273.htm
Can you please tell me which are the rights required by the Splunk plugin to access Commvault logs and jobs information?
Thank you in advance.
