How do you disable the REST API endpoint services/server/info?

[jtiner]

Here's the deal. When you do a curl for the endpoint services/server/info on a search head, it includes information like the license key and it doesn't require any auth. no token, no user:pass, nothing.

All other endpoints require auth, but not the info one. I would like to disable or at least mask certain fields, but I can't see any where in the docs where it is even mentioned other than a description of the endpoint.

[dominiquevocat]

Have a look at https://docs.splunk.com/Documentation/Splunk/6.5.0/Admin/Restmapconf

[asriv11]

Hi,

I am experiencing the same issue, can you let me know where I need to put restriction in RestMapconf so that the server-info endpoint is not accessible

[andrewaalin]

[admin:server-info]
requireAuthentication = true

[admin:server-info-alias]
requireAuthentication = true