Getting Data In

Can anyone provide an example of a website monitor data input in an inputs.conf file that will authenticate with windows authentication?

jaeshort
New Member

I want to get around the 401 authentication error and get a 200 http status. I am not sure how to set the inputs.conf file to support this when the website uses windows authentication.

0 Karma

LukeMurphey
Champion

The Website Monitoring app tries to detect the type of authentication automatically. It is possible this isn't working properly.

Can you check the following logs and see if the inputs appear to be using NTLM authentication?

index=_internal sourcetype="web_availability_modular_input" auth_type
0 Karma

jaeshort
New Member

Lots of these
2017-02-21 20:36:52,423 DEBUG Discovered auth_type=ntlm

0 Karma

LukeMurphey
Champion

Ok, so it is using ntlm which is what it should be using. Are there any other logs that indicate why this may be failing (look for any errors too)? You may want to look at logs on the Windows device to see if provides some insight.

0 Karma
Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...