Getting Data In

Having trouble deleting identities.conf file using API (Error: authentication failed/ method not allowed).

test_splunk15
Explorer

Hi Team,

I am trying to use below command to delete the identities.conf file /opt/splunk/etc/apps/splunk_app_db_connect/local, however I am getting authentication failed/method not allowed.

What is the exact syntax to delete this .conf file using API?

curl -k -u  admin:password --request DELETE https://localhost:8089/servicesNS/nobody/splunk_app_db_connect/db_connect/dbxproxy/identities -d \"{\"name\":\"user\",\"username\":\"appusername\",\"password\":\"apppassword\"}\"

also tried without passing -d parameters.

{"code":405,"message":"HTTP 405 Method Not Allowed"}
0 Karma

test_splunk15
Explorer

or is there a way we can delete any conf file using api call which Splunk recognizes? as I am creting it using API call and during deletion, we can manually delete the file and do a splunk restart as a work around, but would be helpful to understand if there is any better way?

Thanks.

0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

[Puzzles] Solve, Learn, Repeat: Unmerging HTML Tables

[Puzzles] Solve, Learn, Repeat: Unmerging HTML TablesFor a previous puzzle, I needed some sample data, and ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...