Getting Data In

Single Shared User for Organization

derekf
Explorer

Our use case is: we have an organization that would sign in to only use the REST API with a web app we have built.

The users do not need to sign in to view the dashboards, so having a single shared user to just present the data within our application is ideal.

For example: we have an application that uses the Splunk REST API to gather some data and display that data within the larger application. We want to simply have a user use our application, but not worry about authorization with the Splunk server.

0 Karma

inventsekar
SplunkTrust
SplunkTrust

i think you can create a splunk service user account (a normal user account with least privileges, enable privileges it to run REST API's)

https://docs.splunk.com/Documentation/Splunk/7.2.1/Security/Secureyourserviceaccounts
https://docs.splunk.com/Documentation/Splunk/7.2.1/Installation/RunSplunkasadifferentornon-rootuser

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma

jgbricker
Contributor

Im not sure I understand where you are stuck. It sounds like you already have the integration built with your app. Can you expand?

0 Karma

derekf
Explorer

Integration is fine. What I mean is that is this a feasible way to use Splunk.

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...