i am running cli command "splunk remove excess buckets" to remove excess buckets from cluster master.
it is asking for id and password.
i am looking to automate it, so i dont want it to ask the id and password.
is this a possibility to configure it that way or what needs to be done so that id/pass is not asked ...
No,
The rest API is always authenticated. You will need to find a way to pass valid credentials to the API before it will take any action.
You can however use a token instead of a username/password
https://docs.splunk.com/Documentation/Splunk/8.0.1/Security/UseAuthTokens
Hi Nick, is the token feature available with 7.2.6 version ? im running this version and cannot find the appropriate role for creating tokens...