topic Re: I'm able to log to the web UI but cannot access REST API in Getting Data In

I'm able to log to the web UI but cannot access REST API

wheresvic — Tue, 18 Sep 2018 14:46:27 GMT

I have a Splunk Enterprise license and I have an admin user who can login via the web UI : http://localhost:8000/en-US/app/

This user also has the required user role which allows REST API access. I have also restarted the Splunk service a few times.

I still cannot login via the REST API

curl -k https://localhost:8089/services/auth/login --data-urlencode username=admin --data-urlencode password=splunklocal
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                             Dload  Upload   Total   Spent    Left  Speed
100   164  100   129  100    35    686    186 --:--:-- --:--:-- --:--:--   872<?xml version="1.0" encoding="UTF-8"?>
<response>
  <messages>
    <msg type="WARN">Login failed</msg>
  </messages>
</response>

Note that this is on windows 10 - my colleague installed splunk on windows 7 and everthing worked fine

Splunk Enterprise Version: 7.1.3
Build: 51d9cac7b837

Any help would be very much appreciated!

Re: I'm able to log to the web UI but cannot access REST API

ssadanala1 — Wed, 19 Sep 2018 13:43:36 GMT

Change the password and give it a try . I believe you are using same password as GUI

Re: I'm able to log to the web UI but cannot access REST API

wheresvic — Wed, 19 Sep 2018 14:10:02 GMT

I tried that as well - no luck 😞

curl -u admin:splunklocal -k https://localhost:8089/services/auth/login/ -d"username=admin&password=splunklocal" returns

<?xml version="1.0" encoding="UTF-8"?>
 <response>
  <messages>
    <msg type="WARN">Login failed</msg>
  </messages>
</response>

Re: I'm able to log to the web UI but cannot access REST API

harsmarvania57 — Wed, 19 Sep 2018 14:23:51 GMT

Try like this, curl -k -u admin:splunklocal https://localhost:8089/services/auth/login/ -d username=admin -d password=splunklocal

Re: I'm able to log to the web UI but cannot access REST API

wheresvic — Wed, 19 Sep 2018 14:41:33 GMT

Tried as you suggested, also no luck...

Re: I'm able to log to the web UI but cannot access REST API

harsmarvania57 — Fri, 21 Sep 2018 08:49:16 GMT

Any error in $SPLUNK_HOME/var/log/splunk/splunkd.log ? I am able to run command which is given by me on Splunk 7.1.2 successfully.

Re: I'm able to log to the web UI but cannot access REST API

wheresvic — Mon, 24 Sep 2018 08:34:01 GMT

Hi - no errors in splunkd.log either. I know it is supposed to work but it just doesn't - this is very weird 😞