<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to use Splunk rest api in secure mode in Security</title>
    <link>https://community.splunk.com/t5/Security/How-to-use-Splunk-rest-api-in-secure-mode/m-p/405263#M9781</link>
    <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;By default Splunk use their own signed certificate with management port (8089), so to send request in secure mode you can configure Splunk management port with self-signed certificate or third party certificate, if you do not want to configure self-signed certificate or third party certificate then import Splunk CA from &lt;CODE&gt;$SPLUNK_HOME/etc/auth/&lt;/CODE&gt; to your browser if you are using POSTMAN Chome App, have a look at Postman  Docs &lt;A href="http://blog.getpostman.com/2014/01/28/using-self-signed-certificates-with-postman/"&gt;http://blog.getpostman.com/2014/01/28/using-self-signed-certificates-with-postman/&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;If you want to configure self-signed certificate in this case as well you need to import root CA in your browser Trusted Certificate store.&lt;/P&gt;</description>
    <pubDate>Fri, 22 Feb 2019 11:11:17 GMT</pubDate>
    <dc:creator>harsmarvania57</dc:creator>
    <dc:date>2019-02-22T11:11:17Z</dc:date>
    <item>
      <title>How to use Splunk rest api in secure mode</title>
      <link>https://community.splunk.com/t5/Security/How-to-use-Splunk-rest-api-in-secure-mode/m-p/405262#M9780</link>
      <description>&lt;P&gt;I started exploring splunk ReST API and I'm using postman to test them.&lt;BR /&gt;
Splunk Rest api is throwing error if SSL verification is turned on in postman.&lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;Settings&lt;/STRONG&gt;&lt;BR /&gt;
&lt;IMG src="https://community.splunk.com/storage/temp/270633-settings-ssl.png" alt="alt text" /&gt;&lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;Error&lt;/STRONG&gt;&lt;BR /&gt;
&lt;IMG src="https://answers.splunk.com/storage/temp/270634-capture.png" alt="alt text" /&gt;&lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;If i turn SSL certificate verification off, i'm getting the response from splunkd&lt;/STRONG&gt;&lt;BR /&gt;
&lt;STRONG&gt;Request&lt;/STRONG&gt;&lt;BR /&gt;
&lt;A href="https://localhost:8089/services/auth/login" target="_blank"&gt;https://localhost:8089/services/auth/login&lt;/A&gt;&lt;BR /&gt;
&lt;STRONG&gt;Response&lt;/STRONG&gt;&lt;BR /&gt;
"{&lt;BR /&gt;
    "sessionKey": "ezeocaLe6jyO4BiVwBsKDhDxEvmXi10rg9L0jYJrTzTx_XdFM_4Xsd3zupypHZn8QxCHVtffg9^Mt05dcl_lyIzE7puXrP9DbXSNriYp",&lt;BR /&gt;
    "message": "",&lt;BR /&gt;
    "code": ""&lt;BR /&gt;
}"&lt;/P&gt;</description>
      <pubDate>Tue, 29 Sep 2020 23:24:33 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/How-to-use-Splunk-rest-api-in-secure-mode/m-p/405262#M9780</guid>
      <dc:creator>Nagarajv</dc:creator>
      <dc:date>2020-09-29T23:24:33Z</dc:date>
    </item>
    <item>
      <title>Re: How to use Splunk rest api in secure mode</title>
      <link>https://community.splunk.com/t5/Security/How-to-use-Splunk-rest-api-in-secure-mode/m-p/405263#M9781</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;By default Splunk use their own signed certificate with management port (8089), so to send request in secure mode you can configure Splunk management port with self-signed certificate or third party certificate, if you do not want to configure self-signed certificate or third party certificate then import Splunk CA from &lt;CODE&gt;$SPLUNK_HOME/etc/auth/&lt;/CODE&gt; to your browser if you are using POSTMAN Chome App, have a look at Postman  Docs &lt;A href="http://blog.getpostman.com/2014/01/28/using-self-signed-certificates-with-postman/"&gt;http://blog.getpostman.com/2014/01/28/using-self-signed-certificates-with-postman/&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;If you want to configure self-signed certificate in this case as well you need to import root CA in your browser Trusted Certificate store.&lt;/P&gt;</description>
      <pubDate>Fri, 22 Feb 2019 11:11:17 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/How-to-use-Splunk-rest-api-in-secure-mode/m-p/405263#M9781</guid>
      <dc:creator>harsmarvania57</dc:creator>
      <dc:date>2019-02-22T11:11:17Z</dc:date>
    </item>
  </channel>
</rss>

