Is there a way to change the token prefix from splunk to bearer?

[nareshkumarg]

Hi All,

I am working on an integration between Grafana and Splunk where I am trying to ingest alert data from Grafana into Splunk using webhook. The issue here is Grafana uses Prometheus to send data where it can authenticate external applications using bearer token. 

But Splunk accepts token with the following format splunk <token> but Prometheus sends in bearer <token>. 

Is there a way to overcome this or should I build my own sperate solution like an intermediate webhook that will receive the data from grafana and send the data to Splunk? I really don't want to introduce one more hop/failover point on our requirement.

Please help.

Regards,

Naresh

[HoardingIO · Accepted solution]

Hi Naresh,

I think a better place for this question is:

https://community.splunk.com/t5/Developing-for-Splunk-Enterprise/bd-p/dev-splunk-enterprise

or

https://community.splunk.com/t5/Getting-Data-In/bd-p/getting-data-in

Also check out dev.splunk.com for documentation. I hope that is helpful

[nareshkumarg]

Thanks, @HoardingIO Sure I will ask the question on provided community.