Getting Data In

Splunk and Postman

jwkriewall
Observer

I have a question regarding the Splunk and Postman interaction. I've set up a Splunk instance inside a Linux virtual machine. I am able to use the curl command to access Splunk endpoints in the VM. Doing so returns an SID which I can then use to get Splunk data.

However, I am having a hard time retrieving the SID from Postman. When I try to connect to the API I am met with an "Unauthorized" message (pic attached). I am using Basic Auth and inputting an admin username and PW. 

Any ideas on what to do? What piece am I missing?

jwkriewall_0-1621860652590.png

jwkriewall_1-1621860721079.png

 

 

Labels (1)
0 Karma

Marco
Communicator

For step 1  you are supposed to use this Url: https://api.splunk.com/2.0/rest/login/splunk

 

Correct Url.PNG

 

0 Karma

jwkriewall
Observer

Before this suggestion comes in, I've already disabled SSL Certification on Postman!

0 Karma
Get Updates on the Splunk Community!

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

Splunk Up Your Game: Why It's Time to Embrace Python 3.9+ and OpenSSL 3.0

Did you know that for Splunk Enterprise 9.4, Python 3.9 is the default interpreter? This shift is not just a ...