Page Not Found

[MiddleGeorgiaState]

I have a regular user assigned the reader role and an additional role that has access to one stream. I can create a Quick Values Graph. When I try to create a Quick Values Plus graph I get "page not found." The Quick Values Plus graphs create fine when using the admin account. This is the URL shown in red at the bottom when the error is generated.

Loading quick values failed with status: Error: cannot GET https://graylog.mydomain.edu:9000/api/search/universal/relative/terms?query=%2A&range=604800&field=winlogbeat_level&order=winlogbeat_level%3Awinlogbeat_level%3Adesc&size=25&stacked_fields=&size=25&order=winlogbeat_level:desc (403)

[billmurrin]

I'll look into this. Thank you for the report.

On Thu, Jun 7, 2018 at 8:45 AM Joel notifications@github.com wrote:

I have a regular user assigned the reader role and an additional role that has access to one stream. I can create a Quick Values Graph. When I try to create a Quick Values Plus graph I get "page not found." The Quick Values Plus graphs create fine when using the admin account.

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/billmurrin/graylog-plugin-quickvaluesplus-widget/issues/48, or mute the thread https://github.com/notifications/unsubscribe-auth/ALURiPgK0HX19PbvZQHy8C4e3P7fxo7yks5t6XTWgaJpZM4Ue7NK .

[MiddleGeorgiaState]

I'm in the process of implementing GrayLog. Your plugin makes Graylog so much more useful. I'll be glad to test or give further information if needed. Thank you.

[MiddleGeorgiaState]

I managed to get the widget to work for non-admins by adding this permission:

sudo curl -v -XPOST -u admin:PASSWORD -H 'Content-Type: application/json' 'https://graylog.yourdomain.com:9000/api/roles' --insecure -d '{"read_only": false,"permissions": ["savedsearches:read","searches:relative","searches:absolute","searches:keyword","dashboards:edit"],"name": "Allow Add 3rd Party Widget","description": "Allow Add 3rd Party Widget"}'

There may be more permissions here than necessary.