topic Re: REST API password in All Apps and Add-ons

REST API password

ccsfdave — Fri, 20 May 2016 14:13:54 GMT

I set the darn thing over 3 years ago and it is not any of my usual passwords. Is there a way to recover the REST API password? I am talking about the one that defaults as "changeme"

Also if I can recover it, will anything break e.g. forwarders?

Thanks!

Re: REST API password

jkat54 — Fri, 20 May 2016 16:03:28 GMT

You can revert to the default encrypted password in $splunk_home/etc/passwd .

Just install on a test server/laptop and copy the line that is for the admin user. Then the pass will be changeme again.

Nothing will break unless you have scripts that call the API. They'll need to be updated with the new password you set.

Also the rest api pass is the same as the web ui user/passes. Just making sure you know that.

Re: REST API password

ccsfdave — Fri, 20 May 2016 16:11:20 GMT

OH if the API pwd is the same as the UI, I know that but it keeps choking on some of the special characters in my password. Do I need to escape them?

Re: REST API password

jkat54 — Fri, 20 May 2016 16:29:32 GMT

Yep

 'Password\!'

For example maybe Google "which characters to escape with curl/whatever you're using"

Re: REST API password

ccsfdave — Fri, 20 May 2016 17:05:59 GMT

Sweet,

No need to change or recover, just needed the escape characters. I am good now!