topic Re: How do you disable the REST API endpoint services/server/info? in Getting Data In

How do you disable the REST API endpoint services/server/info?

jtiner — Tue, 28 Jun 2016 17:44:43 GMT

Here's the deal. When you do a curl for the endpoint services/server/info on a search head, it includes information like the license key and it doesn't require any auth. no token, no user:pass, nothing.

All other endpoints require auth, but not the info one. I would like to disable or at least mask certain fields, but I can't see any where in the docs where it is even mentioned other than a description of the endpoint.

Re: How do you disable the REST API endpoint services/server/info?

dominiquevocat — Mon, 14 Nov 2016 08:58:14 GMT

Have a look at https://docs.splunk.com/Documentation/Splunk/6.5.0/Admin/Restmapconf

Re: How do you disable the REST API endpoint services/server/info?

asriv11 — Mon, 11 Dec 2017 06:43:54 GMT

Hi,

I am experiencing the same issue, can you let me know where I need to put restriction in RestMapconf so that the server-info endpoint is not accessible

Re: How do you disable the REST API endpoint services/server/info?

andrewaalin — Thu, 31 Oct 2019 19:38:41 GMT

[admin:server-info]
requireAuthentication = true

[admin:server-info-alias]
requireAuthentication = true