Getting Data In

enabling rest api access

a212830
Champion

Hi,

I have a customer who would like to interact with Splunk, via REST. How do I enable an account to have REST access?

Tags (1)
0 Karma

vgenovese
Splunk Employee
Splunk Employee

However, a regular user can access their saved searches, but cannot, for example, enumerate or modify inputs.

The docs do not cover this use case, so I will be updating them to better answer this question.

vgenovese
Splunk Employee
Splunk Employee

Any admin user can access the REST API.

Refer to the REST API Reference manual for details: http://docs.splunk.com/Documentation/Splunk/latest/RESTAPI/RESTcontents

Be sure to read the section "Splunk REST API basics": http://docs.splunk.com/Documentation/Splunk/latest/RESTAPI/RESTusing

vgenovese
Splunk Employee
Splunk Employee

Access to the REST endpoints is covered by the capabilities for a role. By default, an admin user role has the capabilities to access all of the public REST API.

By default, a user role has access based on the capabilities for that role. This includes access to searches, listing inputs, or getting information from the services/properties endpoint.

If you want a non-admin user to have additional access, you need to create a role for the user and then add the specific capabilities you want the user to have access to.

a212830
Champion

What about non-admin? I don't want to be giving out admin access to anyone but support personnel.

0 Karma
Get Updates on the Splunk Community!

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...