<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic HTTP 401 Error seen in splunk logs while connecting to SAP middleware application in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/HTTP-401-Error-seen-in-splunk-logs-while-connecting-to-SAP/m-p/480913#M82445</link>
    <description>&lt;P&gt;Hello Experts,&lt;/P&gt;

&lt;P&gt;Please see the details below:&lt;BR /&gt;
Flow: Web Services partner interface (Client application) =&amp;gt; invokes SAP Middleware URL =&amp;gt; Webseal/TAM junction URL&lt;BR /&gt;
SAP middleware URL starts with Webseal/TAM junction url followed by interface specific details. SAP Middleware uses LDAP for authentication&lt;BR /&gt;
Intermittent calls are failing with 401 error even though same interface using same user ID / password combination is &lt;BR /&gt;
working fine for majority of the calls.&lt;/P&gt;

&lt;P&gt;When we check the splunk logs, we can see the error code for some calls like HTTP 401 but it does not show the user id which is sent from the web service partner interface (source) to SAP Middleware/Webseal. is there any way or query which can display or let us know what is the used id used in the request sent by the source to SAP. We have checked but did not see any such field which could tell about this.&lt;/P&gt;

&lt;P&gt;And also the error simply says HTTP 401 unauthorized, it does not give any logs what caused that error to happen. Need to know what is going wrong here and how we can resolve this intermittent error. Please do the needful.&lt;/P&gt;</description>
    <pubDate>Sat, 14 Sep 2019 05:34:18 GMT</pubDate>
    <dc:creator>xplore1988</dc:creator>
    <dc:date>2019-09-14T05:34:18Z</dc:date>
    <item>
      <title>HTTP 401 Error seen in splunk logs while connecting to SAP middleware application</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/HTTP-401-Error-seen-in-splunk-logs-while-connecting-to-SAP/m-p/480913#M82445</link>
      <description>&lt;P&gt;Hello Experts,&lt;/P&gt;

&lt;P&gt;Please see the details below:&lt;BR /&gt;
Flow: Web Services partner interface (Client application) =&amp;gt; invokes SAP Middleware URL =&amp;gt; Webseal/TAM junction URL&lt;BR /&gt;
SAP middleware URL starts with Webseal/TAM junction url followed by interface specific details. SAP Middleware uses LDAP for authentication&lt;BR /&gt;
Intermittent calls are failing with 401 error even though same interface using same user ID / password combination is &lt;BR /&gt;
working fine for majority of the calls.&lt;/P&gt;

&lt;P&gt;When we check the splunk logs, we can see the error code for some calls like HTTP 401 but it does not show the user id which is sent from the web service partner interface (source) to SAP Middleware/Webseal. is there any way or query which can display or let us know what is the used id used in the request sent by the source to SAP. We have checked but did not see any such field which could tell about this.&lt;/P&gt;

&lt;P&gt;And also the error simply says HTTP 401 unauthorized, it does not give any logs what caused that error to happen. Need to know what is going wrong here and how we can resolve this intermittent error. Please do the needful.&lt;/P&gt;</description>
      <pubDate>Sat, 14 Sep 2019 05:34:18 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/HTTP-401-Error-seen-in-splunk-logs-while-connecting-to-SAP/m-p/480913#M82445</guid>
      <dc:creator>xplore1988</dc:creator>
      <dc:date>2019-09-14T05:34:18Z</dc:date>
    </item>
    <item>
      <title>Re: HTTP 401 Error seen in splunk logs while connecting to SAP middleware application</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/HTTP-401-Error-seen-in-splunk-logs-while-connecting-to-SAP/m-p/480914#M82446</link>
      <description>&lt;P&gt;Any pointers please?&lt;/P&gt;</description>
      <pubDate>Wed, 18 Sep 2019 03:35:05 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/HTTP-401-Error-seen-in-splunk-logs-while-connecting-to-SAP/m-p/480914#M82446</guid>
      <dc:creator>xplore1988</dc:creator>
      <dc:date>2019-09-18T03:35:05Z</dc:date>
    </item>
  </channel>
</rss>

