topic Re: How to pass Username and Password as a parameter via Splunk URL? in Security

How to pass Username and Password as a parameter via Splunk URL?

kiril123 — Wed, 28 Feb 2018 10:46:43 GMT

I use the following URL to call Splunk dashboard and pass a device_name as a parameter:

http://splunk:8000/en-GB/app/search/device_search?form.event_data=%22%22&form.time.earliest=-24h%40h&form.time.latest=now&form.device_name=device_hostname

Is there a way to pass username and password via URL as well?

Re: How to pass Username and Password as a parameter via Splunk URL?

p_gurav — Wed, 28 Feb 2018 11:37:04 GMT

Hi you can try this:

In etc/system/local/web.conf, you can add following settings:

enable_insecure_login = [True | False]
* Indicates if the GET-based /account/insecurelogin endpoint is enabled
* Provides an alternate GET-based authentication mechanism
* If True, the following url is available:
http://localhost:8000/en-US/account/insecurelogin?loginType=splunk&username=noc&password=XXXXXXX
* If False, only the main /account/login endpoint is available
* Defaults to False

Restart splunk after updating settings.

Re: How to pass Username and Password as a parameter via Splunk URL?

kiril123 — Wed, 28 Feb 2018 12:01:41 GMT

Hi,

Thank you for your answer. Is it possible to pass username/password credentials as well as device_name in a single URL?

Re: How to pass Username and Password as a parameter via Splunk URL?

p_gurav — Wed, 28 Feb 2018 12:35:28 GMT

Hi,

I am not sure if you can directly pass both parameter in same url but you can try using splunk SDK. Refere below link:
http://dev.splunk.com/view/python-sdk/SP-CAAAEK2