Security

Cant authenticate with Splunk API ??

johandk
Path Finder

When trying to authenticate to the API I keep getting Login Failed messages.

I have changed the admin password as the docs suggest. Should I be logging in with admin?

Are there any server configs I should check?

Thanks

Tags (2)
0 Karma
1 Solution

johandk
Path Finder

The mime type should be application/x-www-form-urlencoded in the post request. My http lib wasn't doing this out of the box.

View solution in original post

0 Karma

johandk
Path Finder

The mime type should be application/x-www-form-urlencoded in the post request. My http lib wasn't doing this out of the box.

0 Karma

rishiehari
Explorer

I have the same problem. So could you be more detailed in your explanation for this.

Thanks

0 Karma

johandk
Path Finder

Seems like overkill to do http basic auth on every request. Anyway, I figured it out. My http client lib wasn't sending the username, password values correctly. All is well now

0 Karma

Stephen_Sorkin
Splunk Employee
Splunk Employee

How are you trying to authenticate? The simplest way is to use HTTP basic auth and pass credentials with every call. Are you using the /services/auth/login call? Have you tried using your credentials to connect to the management port using a browser?

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

REGISTER NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If ...

Observability | Use Synthetic Monitoring for Website Metadata Verification

If you are on Splunk Observability Cloud, you may already have Synthetic Monitoringin your observability ...

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...