All Apps and Add-ons

Why am I getting "Splunk connectivity error: HTTP 401 -- Login failed" configuring the Splunk User Behavior Analytics (Splunk UBA) data source?

kranthi851
New Member

Hi All,
I'm getting a error in Configuring the Splunk UBA data source. Before it worked perfectly, but now all data sources status are in Processing and getting a error:

Splunk connectivity error: HTTP 401 -- Login failed
0 Karma

David
Splunk Employee
Splunk Employee

Probably too late to help you, but for anyone else who stumbles across this... these errors are typically just as they seem -- HTTP 401 should just mean that your credentials are not valid. UBA is just a client of Splunk, so you can validate this by logging into the search head with the same credentials. If you have a UBA data source that was running and no longer does, we can also check the system logs to see if there's anything else interesting there (open a support request and voice this problem), but it should be just a matter of checking your credentials.

Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...