topic Re: Why do I receive REST API "login failed" message? in Getting Data In

Why do I receive REST API "login failed" message?

nsshey — Tue, 25 Oct 2016 22:26:40 GMT

I ran the following command:

curl -k https://hosthere:8089/services/auth/login -d username=admin -d password=password

and got a weird error, so I tried it in my browser:

https://hosthere:8089/services/auth/login

and got this error:

<response>
<messages>
<msg type="WARN">Login failed</msg>
</messages>
</response>

I don't understand why I am getting this if I didn't even see the pop-up that asks me for login information. Sometimes my browser allows me to enter my login info, and then API works, and sometimes it doesn't. I checked and my pop-ups are enabled for this site.

Any suggestions?

Re: Why do I receive REST API "login failed" message?

rjthibod — Tue, 29 Sep 2020 11:33:13 GMT

Go to the access controls menu as an Admin and make sure your role has the following capabilities.

rest_apps_view
rest_properties_get
rest_properties_set
rest_apps_management

Re: Why do I receive REST API "login failed" message?

MuS — Tue, 25 Oct 2016 23:00:02 GMT

Hi nsshey,

You should provide user login information with your curl command:

 curl -k -u admin:changeme https://hosthere:8089/services/auth/login ....

See the docs for more details http://docs.splunk.com/Documentation/Splunk/6.5.0/RESTTUT/RESTbasicexamples

Hope this helps ...

cheers, MuS

Re: Why do I receive REST API "login failed" message?

nnmiller — Tue, 22 Aug 2017 19:43:06 GMT

Reviewing the REST API Reference, it appears that the tutorial docs are incorrect.

Per auth/login REST API docs section, the correct command here is (yes, enter username/pass 2x):

curl -k -u admin:changeme  https://localhost:8089/services/auth/login -d username=admin -d password=changeme

Which returns an XML response with a session key:

<response>
    <sessionKey>192fd3e46a31246da7ea7f109e7f95fd</sessionKey>
</response>