Getting Data In

Single Shared User for Organization

derekf
Explorer

Our use case is: we have an organization that would sign in to only use the REST API with a web app we have built.

The users do not need to sign in to view the dashboards, so having a single shared user to just present the data within our application is ideal.

For example: we have an application that uses the Splunk REST API to gather some data and display that data within the larger application. We want to simply have a user use our application, but not worry about authorization with the Splunk server.

0 Karma

inventsekar
SplunkTrust
SplunkTrust

i think you can create a splunk service user account (a normal user account with least privileges, enable privileges it to run REST API's)

https://docs.splunk.com/Documentation/Splunk/7.2.1/Security/Secureyourserviceaccounts
https://docs.splunk.com/Documentation/Splunk/7.2.1/Installation/RunSplunkasadifferentornon-rootuser

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma

jgbricker
Contributor

Im not sure I understand where you are stuck. It sounds like you already have the integration built with your app. Can you expand?

0 Karma

derekf
Explorer

Integration is fine. What I mean is that is this a feasible way to use Splunk.

0 Karma
Get Updates on the Splunk Community!

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...