I have a question regarding the Splunk and Postman interaction. I've set up a Splunk instance inside a Linux virtual machine. I am able to use the curl command to access Splunk endpoints in the VM. Doing so returns an SID which I can then use to get Splunk data.
However, I am having a hard time retrieving the SID from Postman. When I try to connect to the API I am met with an "Unauthorized" message (pic attached). I am using Basic Auth and inputting an admin username and PW.
Any ideas on what to do? What piece am I missing?
jwkriewall_0-1621860652590.png
jwkriewall_1-1621860721079.png
For step 1 you are supposed to use this Url: https://api.splunk.com/2.0/rest/login/splunk
Correct Url.PNG
Before this suggestion comes in, I've already disabled SSL Certification on Postman!