topic Re: Is there a configuration to restart Splunk web without asking for credentials? in Security

Is there a configuration to restart Splunk web without asking for credentials?

marian_coman — Mon, 30 Oct 2017 15:42:27 GMT

Hello,

Is there a way to restart splunk web without being asked for session credentials?

[splunk@splunk]$ splunk restart splunkweb
Your session is invalid. Please login.
Splunk username:

I would like to have this scheduled in order to get updates for https://splunk:8000/en-US/static/app/my_app/my_csv.csv
Or even better, a way to get that csv link updated, as the only way I found was through splunk web restart ( I have the add-on for debug refresh, but it doesn't seem to work in my enviroment)

Thank you!

Re: Is there a configuration to restart Splunk web without asking for credentials?

adonio — Mon, 30 Oct 2017 18:14:42 GMT

hello there,

does \debug\refresh works?
put in url: http://YourSplunkServer:8000/en-US/debug/refresh

Re: Is there a configuration to restart Splunk web without asking for credentials?

marian_coman — Tue, 31 Oct 2017 08:36:26 GMT

It works, but it's not the desired approach, I need to get the .csv file updated daily and would need a way to automate this.

Re: Is there a configuration to restart Splunk web without asking for credentials?

harsmarvania57 — Tue, 31 Oct 2017 08:56:11 GMT

Hi @marian_coman,

You can run below command and pass admin username and password in command itself.

$SPLUNK_HOME/bin/splunk restart splunkweb -auth <USER>:<PASSWORD>

I hope this helps.

Thanks,
Harshil

Re: Is there a configuration to restart Splunk web without asking for credentials?

MuS — Tue, 31 Oct 2017 09:01:08 GMT

If debug/refresh works for you have a look at this app https://splunkbase.splunk.com/app/1871/ and you can use the pre-built saved search to schedule the reload 😉

cheers, MuS

Re: Is there a configuration to restart Splunk web without asking for credentials?

marian_coman — Tue, 31 Oct 2017 09:44:39 GMT

Hey MuS, I have your add-on installed, it runs successfully for "| refresh" (all the components are with status 200) but for some reason it doesn't refresh the CSV in static... but http://YourSplunkServer:8000/en-US/debug/refresh does instead...

Re: Is there a configuration to restart Splunk web without asking for credentials?

marian_coman — Tue, 31 Oct 2017 12:46:43 GMT

Hi @harsmarvania57, this would work , but I would prefer not to put credential in a scheduled task/script.