topic Re: splunk-reskit-powershell 401 in Getting Data In

splunk-reskit-powershell 401

inicholson — Thu, 26 Jul 2012 14:15:57 GMT

I'm using splunk-reskit-powershell to access splunk, but running "Connect-Splunk -Credentials $credentials -ComputerName "$computername"" causes powershell to throw an error: "Invoke-HTTPPost : Exception calling "GetResponse" with "0" argument(s): "The remote server returned an error: (401) Unauthorized.""
What rights do I need in order to authenticate correctly?

Re: splunk-reskit-powershell 401

halr9000 — Thu, 26 Jul 2012 14:24:21 GMT

401 is very simply an authentication error. So, this means one of the connection parameters are incorrect. Try running it with the -Verbose flag and if you look at the first several lines, you'll see it restate all of the connection parameters. For example:

VERBOSE: Performing operation "Connecting to port 8089 using protocol https with timeout 10000 (ms)" on Target "bd-idx-01.bd.splunk.com".

Double-check that the server, port, and protocol are correct. Also make sure that the credentials which you are supplying work against your Splunk instance.

The credentials that you supply need to have the same rights as what you expect to see when you connect. If you have an admin account, try that just to rule that out as an issue. I just tested a non-admin account and was able to connect to my search head, but not an indexer, so take that into consideration.

Re: splunk-reskit-powershell 401

inicholson — Thu, 26 Jul 2012 15:27:46 GMT

Figured it out! I was trying to authenticate with "username$domain.tld", but splunk was expecting "username".

Re: splunk-reskit-powershell 401

piebob — Thu, 26 Jul 2012 15:56:07 GMT

in the future, if the answer is correct/solves your problem, please accept the answer by clicking the checkmark (i've done it for you). thanks!

Re: splunk-reskit-powershell 401

E17769 — Tue, 13 Oct 2015 14:47:56 GMT

Thanks That works for me. Also, I included my domain name in my user id
EX:
$userName = Me@domain.com

Changed it to
$userName = Me

and it worked after that... It's always the little things

Re: splunk-reskit-powershell 401

E17769 — Tue, 13 Oct 2015 14:49:34 GMT

Thanks the helped me. I included my domain name in my user name and that was the issue.