topic User does not exist error in Splunk Dev

User does not exist error

mvdobrinin — Wed, 05 Jun 2019 08:01:55 GMT

I am seeing an error when attempting to use the REST API.

curl -X POST https://localhost:8089/servicesNS/admin/search/data/indexes -u splunkadmin:splunkadmin -d name=myindexname -k

The given request gives me an error about a completely different user.

<?xml version="1.0" encoding="UTF-8"?>
<response>
  <messages>
    <msg type="ERROR">User does not exist: admin</msg>
  </messages>
</response>

Looking at the configuration in Splunk Web, I don't even see such a user configured.

The version is as follows.
Splunk Enterprise
Version: 7.2.6
Build: c0bf0f679ce9

Any idea what's going on?

VatsalJagani — Wed, 05 Jun 2019 13:57:56 GMT

Hi @mvdobrinin,

curl -X POST https://localhost:8089/servicesNS/splunkadmin/search/data/indexes -u splunkadmin:splunkadmin -d name=myindexname -k
In url also you need to use splunkadmin as you do not have admin user.

mvdobrinin — Wed, 05 Jun 2019 18:42:10 GMT

Thanks for the quick reply. That was the issue. The docs here were not clear on that.

VatsalJagani — Thu, 06 Jun 2019 05:13:43 GMT

@mvdobrinin - In servicesNS/admin/search/, admin is user-name and search is app-name.