graylog-plugin-quickvaluesplus-widget icon indicating copy to clipboard operation
graylog-plugin-quickvaluesplus-widget copied to clipboard

Page Not Found

Open MiddleGeorgiaState opened this issue 7 years ago • 3 comments

I have a regular user assigned the reader role and an additional role that has access to one stream. I can create a Quick Values Graph. When I try to create a Quick Values Plus graph I get "page not found." The Quick Values Plus graphs create fine when using the admin account. This is the URL shown in red at the bottom when the error is generated.

Loading quick values failed with status: Error: cannot GET https://graylog.mydomain.edu:9000/api/search/universal/relative/terms?query=%2A&range=604800&field=winlogbeat_level&order=winlogbeat_level%3Awinlogbeat_level%3Adesc&size=25&stacked_fields=&size=25&order=winlogbeat_level:desc (403)

MiddleGeorgiaState avatar Jun 07 '18 18:06 MiddleGeorgiaState

I'll look into this. Thank you for the report.

On Thu, Jun 7, 2018 at 8:45 AM Joel [email protected] wrote:

I have a regular user assigned the reader role and an additional role that has access to one stream. I can create a Quick Values Graph. When I try to create a Quick Values Plus graph I get "page not found." The Quick Values Plus graphs create fine when using the admin account.

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/billmurrin/graylog-plugin-quickvaluesplus-widget/issues/48, or mute the thread https://github.com/notifications/unsubscribe-auth/ALURiPgK0HX19PbvZQHy8C4e3P7fxo7yks5t6XTWgaJpZM4Ue7NK .

billmurrin avatar Jun 08 '18 05:06 billmurrin

I'm in the process of implementing GrayLog. Your plugin makes Graylog so much more useful. I'll be glad to test or give further information if needed. Thank you.

MiddleGeorgiaState avatar Jun 11 '18 11:06 MiddleGeorgiaState

I managed to get the widget to work for non-admins by adding this permission:

sudo curl -v -XPOST -u admin:PASSWORD -H 'Content-Type: application/json' 'https://graylog.yourdomain.com:9000/api/roles' --insecure -d '{"read_only": false,"permissions": ["savedsearches:read","searches:relative","searches:absolute","searches:keyword","dashboards:edit"],"name": "Allow Add 3rd Party Widget","description": "Allow Add 3rd Party Widget"}'

There may be more permissions here than necessary.

MiddleGeorgiaState avatar Oct 22 '18 19:10 MiddleGeorgiaState