Security

refresh from batch file and authenticating at the same time

Javo222
Path Finder

I'm writing a batch file that will send an http command to refresh my splunk instance. This works fine when I have already logged in with my browser once, but If I haven't logged in recently, it won't refresh and instead ask me to login.

The command sent by my batch file is

http://admin:pass@localhost:8000/en-US/debug/refresh

I always get redirected to

http://localhost:8000/en-US/account/login?return_to=%2Fen-US%2Fdebug%2Frefresh

How to bypass this page?

0 Karma
1 Solution

MuS
Legend

Hi Javo222,

take a look at this App https://apps.splunk.com/app/1871/ it was written for such use cases.
It will provide a new search command called refresh which can be called from cli or scheduled as saved search.

hope this helps ...

cheers, MuS

View solution in original post

MuS
Legend

Hi Javo222,

take a look at this App https://apps.splunk.com/app/1871/ it was written for such use cases.
It will provide a new search command called refresh which can be called from cli or scheduled as saved search.

hope this helps ...

cheers, MuS

MuS
Legend

Update:

there will be soon an update to the app released which works on Splunk 7.1.x. It also features the option to only reload one specific entity.

Link to the app: https://splunkbase.splunk.com/app/1871/#/details

cheers, MuS

0 Karma

MuS
Legend

Update available here https://splunkbase.splunk.com/app/1871/

cheers, MuS

0 Karma

Javo222
Path Finder

Hi MuS, Thanks! I added the App to my Splunk but I'm not sure how to use it. Is there any documentation available?

0 Karma

MuS
Legend

simply enter this in the search field

| refresh

you can save it as saved search and schedule it that way or call it from the cli like this

$SPLUNK_HOME/bin/splunk search "| refresh"

hope that helps ...

Javo222
Path Finder

Ahh really good thanks! One last question hopefully, is there a way to refresh only some modules? Similar to /debug/refresh?entity=data/ui/views
It seems "| refresh?entity=data/ui/views" doesn't work

0 Karma

MuS
Legend

nope this is not implemented....maybe some day 😉

0 Karma

Javo222
Path Finder

looking forward to it! thanks!

0 Karma

MuS
Legend

please mark this as answered - thx

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...