topic How can I disable authentication for a collection of KVstore in Dashboards & Visualizations

How can I disable authentication for a collection of KVstore

adri9valle — Wed, 13 Feb 2019 07:32:59 GMT

Hi,

I need that a python script can make a request to a specific collection of the KVstore. The problem is that the python script cannot generate the token to authenticate against the KVstore.

I'm looking for a solution, I'm thinking in disable the authentication only for this collection or generates a token that never expires to use in every request. If is it possible how can I do this?

I don't know if there're more possibilities.

Thanks,

Regards,

Re: How can I disable authentication for a collection of KVstore

MoniM — Wed, 13 Feb 2019 08:49:45 GMT

Hi @adri9valle ,
It is not possible to disable the authentication as KVstore requires it. To generate the authentication token you need to configure commands.conf file and enable the fields of enableheader and passauth to true.
please go through the below link for more details:-
https://answers.splunk.com/answers/481239/is-there-a-way-to-get-anonymous-access-to-splunks.html

hope it helps!!
Thanks

Re: How can I disable authentication for a collection of KVstore

adri9valle — Wed, 13 Feb 2019 09:40:21 GMT

Hi @MoniM ,

The problem is that I'm trying to create a new data input script to execute each hour, this script needs access to the KVstore but I don't know how can authenticate against the KVstore from a python script.

How can I get the credentials to make the request from the script automatically?

Thanks!

Re: How can I disable authentication for a collection of KVstore

woodcock — Wed, 13 Feb 2019 16:43:01 GMT

Almost anything that you can do with a KV Store, you can do through SPL in a search. You can run a Splunk search remotely through various means but most people don't know that you can run a Splunk search directly on the search head like this (security vulnerability acknowledged):

$SPLUNK_HOME/bin/splunk search "Your SPL to do KV Store stuff here" -auth <user>:<PW>