Getting Data In

C# Rest API Authentication Failed

gmusumeci
New Member

I have an app on C# that writes directly into Splunk index (without forwarder).

I tested it on our prod environment running Splunk Enterprise and the Trial and works fine.

But when I run the tool on my development server running Splunk Free the app is stop working.

The error I got is "The remote server returned an error: (401) Unauthorized."

Look like authentication is disable on free version.

I believe C# SDK for Splunk works only with authorized connection.

Anyone can confirm if auhtentication is disabled or write is not allowed on the Free version?

Thanks! Guillermo

0 Karma
1 Solution

Damien_Dallimor
Ultra Champion

In your server.conf file on your Free License version of Splunk , what is your allowRemoteLogin value set to ? Try "always".

http://docs.splunk.com/Documentation/Splunk/6.0/Admin/Serverconf

Also , you might want to look a signing up for a Splunk developer license.

View solution in original post

0 Karma

Damien_Dallimor
Ultra Champion

In your server.conf file on your Free License version of Splunk , what is your allowRemoteLogin value set to ? Try "always".

http://docs.splunk.com/Documentation/Splunk/6.0/Admin/Serverconf

Also , you might want to look a signing up for a Splunk developer license.

0 Karma

gmusumeci
New Member

Hi Damien

I added the allowRemoteLogin=always, restarted Splunk service and works now.

Thank you very much! Guillermo

0 Karma

gmusumeci
New Member

Hello,

Thank you for your response.

Any ideas what can cause the error on free version? The code works fine with enterprise.

Can you please post an example how to write directly into indexer?

Thanks! Guillermo

0 Karma

linu1988
Champion

There is no code which i can share here, I had tried it and it was working. You can apply a little exception handling to see where and what exactly the error is.

I guess you might have seen this already:
_http://dev.splunk.com/view/csharp-sdk/SP-CAAAEQE

0 Karma

linu1988
Champion

It works on free version, i have tested it

0 Karma
Get Updates on the Splunk Community!

Don't wait! Accept the Mission Possible: Splunk Adoption Challenge Now and Win ...

Attention everyone! We have exciting news to share! We are recruiting new members for the Mission Possible: ...

Unify Your SecOps with Splunk Mission Control

In today’s post, I'm excited to share some recent Splunk Mission Control innovations. With Splunk Mission ...

Data Preparation Made Easy: SPL2 for Edge Processor

By now, you may have heard the exciting news that Edge Processor, the easy-to-use Splunk data preparation tool ...