Pulling data from a remote Splunk server via REST with Authentication

[jodros]

I have an issue trying to fix a dashboard in Deployment Monitor App, the License Report for last 60 days. It is utilizing a rest command to pull license slaves. The server running the Deployment Monitor App is not the license master. I need to modify the rest url in the search to point to the license master. I have verified that the new rest URL is correct for pulling a listing of license slaves but is not returning results. I tried the rest URL directly in a separate browser and it appears that the license master is prompting for a username/password.

What is the best way to accomplish passing credentials with the rest command?

Thanks in advance.

[Ayn]

You'd need to add the server as a search peer in order to be able to use the rest command against it. If that's not the case, you cannot use the rest command. You could develop your own script for doing the same thing, though obviously it's a bit more work.

[jodros]

How would this affect this server? This isn't one of our distributed indexers. Would every search scheduled to run on our searchhead send knowledge bundles to the license master even though it will not house any data? All searchheads, forwarders, deployment server, and license master forward all logs, including internal logs to the indexers. I was hoping I would only have to look to them for data.

Let me know, and thanks for the assistance.