All Apps and Add-ons

Why am I getting "Splunk connectivity error: HTTP 401 -- Login failed" configuring the Splunk User Behavior Analytics (Splunk UBA) data source?

kranthi851
New Member

Hi All,
I'm getting a error in Configuring the Splunk UBA data source. Before it worked perfectly, but now all data sources status are in Processing and getting a error:

Splunk connectivity error: HTTP 401 -- Login failed
0 Karma

David
Splunk Employee
Splunk Employee

Probably too late to help you, but for anyone else who stumbles across this... these errors are typically just as they seem -- HTTP 401 should just mean that your credentials are not valid. UBA is just a client of Splunk, so you can validate this by logging into the search head with the same credentials. If you have a UBA data source that was running and no longer does, we can also check the system logs to see if there's anything else interesting there (open a support request and voice this problem), but it should be just a matter of checking your credentials.

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...