Getting Data In

401 Unauthorized when trying to use REST API

yallami
Explorer

Hello, i am trying to intergrate the Splunk Ui Toolkit into my  own Splunk instace that is running on localhost.

I am using react to get a sessionkey with the following function:

async function GetSessionKey(username, password, server) {
    var key = await fetch(server + "/services/auth/login", {
      method: "POST",
      body: new URLSearchParams({
        username: username,
        password: password,
        output_mode: "json",
      }),
      headers: {
        "Content-Type": "application/x-www-form-urlencoded",
      },
    })
      .then((response) => response.json())
      .then((data) => {
        return data["sessionKey"];
      });
But i always get this on my network showing

yallami_0-1725610292404.png

 

Labels (1)
0 Karma

yallami
Explorer

Thank you for your answers. It turned out, I had to trust the ssl certificate.

tscroggins
Influencer

Hi @yallami,

At a glance, do username and password contain special or unsafe characters? You may need e.g.:

 

{
  username: encodeURIComponent(username),
  password: encodeURIComponent(password),
  output_mode: "json"
}

 

0 Karma

tscroggins
Influencer

--you may also need to perform other sanity checks on username and password before passing them to encodeURIComponent. Check mdn etc. for examples.

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...