Getting Data In

How do I enable CORS in Splunk Enterprise ?

Nagarajv
Explorer

I was trying to build application outside the Splunk web interface using Splunk REST APIs and Angular 6 I Got**CORS rejection error

REST API ( I used 😞 https://localhost:8089/services/auth/login

result:
alt text
*angular Code : *

  login(data) {
    const body = new URLSearchParams();
    body.set('username', data.username);
    body.set('password', data.password);
    body.set('output_mode', 'json');
    const options = {
      headers: new HttpHeaders().set('Content-Type', 'application/x-www-form-urlencoded')
  };
  console.log(body.toString());

      this.http.post('https://localhost:8089/services/auth/login', body.toString(), options).subscribe(
        (resData) => {
          console.log(resData);
        },
        (err) => {
          console.log(err);
        }
      );
    console.log(data);
    }

but it is working fine with Post man

Then I tried Changing server.conf
alt text

0 Karma

rmjharris
Path Finder

If you have admin access to the Splunk server that will receive the requests there is a setting for this in server.conf.

[httpServer]
crossOriginSharingPolicy =

If the intent here is to build an application that will connect to any Splunk instance with a username and password then it is a matter of following the CORS protocol and using an API container.

kamlesh_vaghela
SplunkTrust
SplunkTrust

@Nagarajv

Have you tried to connect Splunk using SplunkJavascript SDK?

http://dev.splunk.com/view/javascript-sdk/SP-CAAAEDD

0 Karma

Nagarajv
Explorer

ya @kamlesh_vaghela , i tried with splunk-sdk(JS) in node Js and it is working good.

but now i'm using ReST API's of Splunk and i'm getting CORSS rejection Error

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...