Getting Data In

REST GET request to get list of AD users

michellertx
New Member

Hello, I'm trying the following request in Postman to send a request to get the list of Active Directory users:
http://:8000/en-GB/manager/search/authentication/users | fields title roles realname
The request header has the basic authencation and I get a 200 response.

However, the response body is not what I expected. I'm getting the following response body:

<!doctype html>
<!--[if lt IE 7]> <html class="no-js ie  lt-ie9 lt-ie8 lt-ie7"> <![endif]-->
<!--[if IE 7]>    <html class="no-js ie7 lt-ie9 lt-ie8"> <![endif]-->
<!--[if IE 8]>    <html class="no-js ie8 lt-ie9"> <![endif]-->
<!--[if IE 9]>    <html class="no-js ie9"> <![endif]-->
<!--[if gt IE 9]><!--> <html class="no-js"> <!--<![endif]-->
<head>
    <meta charset="utf-8" />
    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
    <title></title>
    <meta name="description" content="listen to your data" />
    <meta name="author" content="Splunk Inc." />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="referrer" content="origin" />
    <script type="text/json" id="splunkd-partials">
{"/services/session":{"messages":[],"links":{},"entry":[{"fields":{"optional":[],"required":[],"wildcard":[]},"acl
.....
    </script>
    <script> 

When click on Postman's Preview tab, it says "Splunk relies on JavaScript to function properly.
Please enable JavaScript and then refresh the page to login."

Is my reqest correct for Splunk Enterprise version 7.3.1)
Note that I was able to get the expected result when I try the search command in the GUI:
| rest /services/authentication/users | fields title roles realname
Thanks in advance

Tags (2)
0 Karma

memarshall63
Communicator

Are you trying port 8000 or port 8089 -- command port is usually 8089.

0 Karma

michellertx
New Member

Hi, When I try https, port 8089, I'm getting a 404 return

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Between hands-on technical sessions, keynote reveals, and diving into live architectures, .conf26 is packed ...

Join the Hackathon at .conf26 and build a No-Code AI agent

Join us for the AI Agent Buildathon, an in-person, three-hour hands-on Hackathon where you’ll use Splunk Agent ...