Getting Data In

Splunk VMware "logincreator.pl" returns error

chamil3001
Explorer

Hi

Im trying to use logincreator.pl to create an account in my hosts.

it returns an error saying
"Insufficient permissions ...."

please help on this.
Thanks in advance.

one more question,
does these scripts run under any ports? cuz the hosts are secured by firewall.

Chamil

0 Karma
1 Solution

bbingham
Builder

Usually this is a sign that you are running the scripts with a username that does not have the proper rights on the target host. There also may be a chance you don't have a connection to the required ports on the hosts if they are indeed behind a firewall. Make sure you can access the MOB for the target host from the subnet of the splunk forwarder you are running the scripts from.

The scripts communicate to the MOB through a soap transaction. The default ports you need open are 80 and 443.

View solution in original post

bbingham
Builder

Usually this is a sign that you are running the scripts with a username that does not have the proper rights on the target host. There also may be a chance you don't have a connection to the required ports on the hosts if they are indeed behind a firewall. Make sure you can access the MOB for the target host from the subnet of the splunk forwarder you are running the scripts from.

The scripts communicate to the MOB through a soap transaction. The default ports you need open are 80 and 443.

chamil3001
Explorer

Thanks for the reply.. i will check

0 Karma
Get Updates on the Splunk Community!

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Dashboard Challenge and Watch the .conf24 Global Broadcast!

The Splunk Community Dashboard Challenge is still happening, and it's not too late to enter for the week of ...