Getting Data In

Having trouble deleting identities.conf file using API (Error: authentication failed/ method not allowed).

test_splunk15
Explorer

Hi Team,

I am trying to use below command to delete the identities.conf file /opt/splunk/etc/apps/splunk_app_db_connect/local, however I am getting authentication failed/method not allowed.

What is the exact syntax to delete this .conf file using API?

curl -k -u  admin:password --request DELETE https://localhost:8089/servicesNS/nobody/splunk_app_db_connect/db_connect/dbxproxy/identities -d \"{\"name\":\"user\",\"username\":\"appusername\",\"password\":\"apppassword\"}\"

also tried without passing -d parameters.

{"code":405,"message":"HTTP 405 Method Not Allowed"}
0 Karma

test_splunk15
Explorer

or is there a way we can delete any conf file using api call which Splunk recognizes? as I am creting it using API call and during deletion, we can manually delete the file and do a splunk restart as a work around, but would be helpful to understand if there is any better way?

Thanks.

0 Karma
Get Updates on the Splunk Community!

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...