|
Hello Arkime community, The tool is amazing, I love it and it could be a perfect pcap library. The only issue I have is to delete a session, I found this in the arkime documentation, but where is this privilege settings, I'm login as admin so I must have. And where is the button? So my question is how to delete session and pcap based on tags please? Just for information, I used the Malcolm / arkime version and setup, so privilege must be different than normal Arkime, I have posted a message on Malcolm forum, I try here also if it's ok for you. |
Replies: 3 comments 10 replies
|
In fact I have just that |
|
OK I think because there is no User tab in Malcolm / Arkime interface the user mustn't delete anything from Arkime, but the only way in Malcolm is to wipe the data, and it's all the data... Not just few sessions. |
|
If you don't have a Users tab then you need a superadmin to assign you the usersAdmin role. |
|
I'm the guy who install the setup Awick, there is just me as administrator, but in Malcolm config there is no superadmin account just admin and when you are connected to malcolm with admin you are connected to arkime with admin also, don't know how and if we can change the role. |
|
No clue how Malcolm does it. You'll need to ask them how to assign the role or just add a new user from the command line. |
|
"Just add a new user from the command line." Good idea Awick I didn't think about that, I will try, but not sure it will be connected to a Malcolm user, not so easy, question is already asked here in Malcolm github: cisagov/Malcolm#874 Maybe they take the coffee... Another solution is to install only Arkime and not Malcolm but it's nice to have upload page for pcap, dashboard and page for files extracted. |
|
If I were in charge, I would have fired the developer; it's forbidden to do that. |
|
Or you could open an issue or contribute a fix. This is open source you know. |
|
Yes you're right, it's not really a fix, it's a feature we need to implement but why not. It's always better to complain. |
|
Ok. I find asking nicely works better than complaining usually. Especially with open source. But you do you. |
|
Of course Awick, I know it's why I'm polite, when I tell you it's forbidden to do that, it's to joke, unfortunately, humor isn't apparent in writing. Have a nice day, I will continue on the Malcolm github page and I install Arkime alone to test it, could be better for what I want do. |
If you don't have a Users tab then you need a superadmin to assign you the usersAdmin role.