Getting Data In

Having trouble deleting identities.conf file using API (Error: authentication failed/ method not allowed).


Hi Team,

I am trying to use below command to delete the identities.conf file /opt/splunk/etc/apps/splunk_app_db_connect/local, however I am getting authentication failed/method not allowed.

What is the exact syntax to delete this .conf file using API?

curl -k -u  admin:password --request DELETE https://localhost:8089/servicesNS/nobody/splunk_app_db_connect/db_connect/dbxproxy/identities -d \"{\"name\":\"user\",\"username\":\"appusername\",\"password\":\"apppassword\"}\"

also tried without passing -d parameters.

{"code":405,"message":"HTTP 405 Method Not Allowed"}
Labels (1)
0 Karma


or is there a way we can delete any conf file using api call which Splunk recognizes? as I am creting it using API call and during deletion, we can manually delete the file and do a splunk restart as a work around, but would be helpful to understand if there is any better way?


0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) v3.54.0

The Splunk Threat Research Team (STRT) recently released Enterprise Security Content Update (ESCU) v3.54.0 and ...

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

New Learning Videos on Topics Most Requested by You! Plus This Month’s New Splunk ...

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...