Getting Data In

401 Unauthorized when trying to use REST API

yallami
Explorer

Hello, i am trying to intergrate the Splunk Ui Toolkit into my  own Splunk instace that is running on localhost.

I am using react to get a sessionkey with the following function:

async function GetSessionKey(username, password, server) {
    var key = await fetch(server + "/services/auth/login", {
      method: "POST",
      body: new URLSearchParams({
        username: username,
        password: password,
        output_mode: "json",
      }),
      headers: {
        "Content-Type": "application/x-www-form-urlencoded",
      },
    })
      .then((response) => response.json())
      .then((data) => {
        return data["sessionKey"];
      });
But i always get this on my network showing

yallami_0-1725610292404.png

 

Labels (1)
0 Karma

yallami
Explorer

Thank you for your answers. It turned out, I had to trust the ssl certificate.

tscroggins
Champion

Hi @yallami,

At a glance, do username and password contain special or unsafe characters? You may need e.g.:

 

{
  username: encodeURIComponent(username),
  password: encodeURIComponent(password),
  output_mode: "json"
}

 

0 Karma

tscroggins
Champion

--you may also need to perform other sanity checks on username and password before passing them to encodeURIComponent. Check mdn etc. for examples.

0 Karma
Get Updates on the Splunk Community!

See Splunk Platform & Observability Innovations at Cisco Live EMEA

Hi Splunkers, Learn about what’s next for Splunk Platform at Cisco Live EMEA.  Data silos are a big challenge ...

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...