All Apps and Add-ons

Why am I getting "Splunk connectivity error: HTTP 401 -- Login failed" configuring the Splunk User Behavior Analytics (Splunk UBA) data source?

kranthi851
New Member

Hi All,
I'm getting a error in Configuring the Splunk UBA data source. Before it worked perfectly, but now all data sources status are in Processing and getting a error:

Splunk connectivity error: HTTP 401 -- Login failed
0 Karma

David
Splunk Employee
Splunk Employee

Probably too late to help you, but for anyone else who stumbles across this... these errors are typically just as they seem -- HTTP 401 should just mean that your credentials are not valid. UBA is just a client of Splunk, so you can validate this by logging into the search head with the same credentials. If you have a UBA data source that was running and no longer does, we can also check the system logs to see if there's anything else interesting there (open a support request and voice this problem), but it should be just a matter of checking your credentials.

Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Splunk is officially part of Cisco

Revolutionizing how our customers build resilience across their entire digital footprint.   Splunk ...

Splunk APM & RUM | Planned Maintenance March 26 - March 28, 2024

There will be planned maintenance for Splunk APM and RUM between March 26, 2024 and March 28, 2024 as ...