topic Re: Does the REST API based search support only username/password based authentication? in Getting Data In

Does the REST API based search support only username/password based authentication?

alpsholic — Fri, 28 Sep 2018 00:32:33 GMT

Does the REST API based search support only username/password based authentication?? If I am developing an app which does REST API searches, the customer may not be willing to give username/password. Is there any other way of authorization possible?

Re: Does the REST API based search support only username/password based authentication?

deepashri_123 — Tue, 29 Sep 2020 21:24:30 GMT

Hey@alpsholic,

I am not sure if this will work. But you can ask the customer to create a splunk role which can access rest api and you can use that credentials to do api searches.
The role will need following capabilities:
rest_apps_view
rest_properties_get
rest_properties_set
rest_apps_management

Let me know if this helps!!

Re: Does the REST API based search support only username/password based authentication?

VatsalJagani — Fri, 28 Sep 2018 05:42:57 GMT

Hi @alpsholic,
No you cannot get access to Splunk with REST call without having username and password. But you can ask them for the Session key. Ask them to generate a session key and they can give it to you.

curl -u admin:changeme -k https://localhost:8089/services/auth/login/ -d"username=admin&password=changeme"
 <response>
 <sessionKey>30774f9d502004b5c655c08b5362bdca</sessionKey>

Hope this helps!

There are some other authentication methods available in Splunk, but I don't think that will work with REST api calls - http://docs.splunk.com/Documentation/Splunk/7.1.3/Security/Setupbuilt-inauthentication

Re: Does the REST API based search support only username/password based authentication?

mstjohn_splunk — Fri, 28 Sep 2018 22:57:00 GMT

@alpsholic

Did the answer below help you solve your problem? If so, please resolve this post by approving it!
If your problem is still not solved, keep us updated so that someone else can help ya. Thanks for posting!