topic Re: How can I disable splunk auth for the command-line in Monitoring Splunk

How can I disable splunk auth for the command-line

katzj — Fri, 15 Oct 2010 22:53:50 GMT

I have a regularly scheduled job which generates a log-file which I then use my local splunk light-forwarder to send to a remote splunk instance with splunk add oneshot $LOG_FILE -sourcetype $SOURCE

This ends up requiring authentication. I know that I could hard-code a "-auth user:pass" argument into the script as well, but I'd prefer to not do that and instead be able to just disable authentication on the local host for splunk cli access. Is there a way to do this?

Re: How can I disable splunk auth for the command-line

Genti — Sat, 16 Oct 2010 01:00:23 GMT

I do not think you can disable authentication. You have two options that i can think of:

`./splunk login` before you run the script
use:
`export SPLUNK_USERNAME=admin`
`export SPLUNK_PASSWORD=changeme`

cheers!
.gz

Re: How can I disable splunk auth for the command-line

thartmann — Sat, 16 Oct 2010 02:53:01 GMT

I actually think this would be useful as well, something like kerberos's kadmin.local binary.

Re: How can I disable splunk auth for the command-line

araitz — Sat, 13 Nov 2010 08:36:38 GMT

Just dump the file in a batch directory such as $SPLUNK_HOME/var/spool/splunk. This does not require authentication, and you can control the sourcetype, source, etc with dynamic metadata assignment:

http://docs.splunk.com/Documentation/Splunk/latest/Data/Assignmetadatatoeventsdynamically

Re: How can I disable splunk auth for the command-line

charleswheelus — Wed, 08 May 2013 22:48:35 GMT

This approach is just what I was looking for. Thanks!

Re: How can I disable splunk auth for the command-line

dmahler99 — Wed, 08 Feb 2017 12:11:44 GMT

the export of the user password into environment variables worked great... thanks

Re: How can I disable splunk auth for the command-line

eddiet — Sat, 03 Jun 2017 14:20:49 GMT

where is this username/password envvar documented?

Re: How can I disable splunk auth for the command-line

eddiet — Sat, 03 Jun 2017 14:23:26 GMT

i couldn't find this, where is this documented?

Re: How can I disable splunk auth for the command-line

maraman_splunk — Sun, 04 Jun 2017 14:12:40 GMT

link above has moved to :
http://docs.splunk.com/Documentation/Splunk/latest/Data/Assignmetadatatoeventsdynamically