I was able to get the API functionality to work from a local instance, but having trouble with the Cloud Instance.
curl -v -k -u username https://input-instance.cloud.splunk.com:8089/services/messages
I keep getting an "Unauthorized" response back, things I tried:
-UID from setting up the splunk account
-My first name
Also tried a couple different passwords but no joy. Any help is appreciated, thanks.
Using the trial version.
Splunk users must have role and/or capability-based authorization to use REST endpoints. Users with an administrative role, such as admin, can access authorization information in Splunk Web. To view the roles assigned to a user, select Settings > Access controls and click Users. To determine the capabilities assigned to a role, select Settings > Access controls and click Roles.