All Apps and Add-ons

Is it possible to disable authentication

sebastian1
New Member

My Elasticsearch Cluster does not need any authentication. Is it possible to disable it in your app?

0 Karma

farrukhahmed
Explorer

Hello sebastian1,

Yes, you can disable the authentication by editing the inputs.conf and set the user and secret as blank.

inputs.conf

[elasticsearch_json://esearch]
date_field_name = timestamp
elasticsearch_indice = esindex
elasticsearch_instance_url = http://eshost
greater_or_equal = 2019-01-01
index = esh_index
interval = 60
lower_or_equal = now
port = 9200
use_ssl = False
verify_certs = False
user =
secret =
sourcetype = elasticsearch

Thank you.

0 Karma
Get Updates on the Splunk Community!

Splunk Lantern | Spotlight on Security: Adoption Motions, War Stories, and More

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Cloud | Empowering Splunk Administrators with Admin Config Service (ACS)

Greetings, Splunk Cloud Admins and Splunk enthusiasts! The Admin Configuration Service (ACS) team is excited ...

Tech Talk | One Log to Rule Them All

One log to rule them all: how you can centralize your troubleshooting with Splunk logs We know how important ...