Security

Cant authenticate with Splunk API ??

johandk
Path Finder

When trying to authenticate to the API I keep getting Login Failed messages.

I have changed the admin password as the docs suggest. Should I be logging in with admin?

Are there any server configs I should check?

Thanks

Tags (2)
0 Karma
1 Solution

johandk
Path Finder

The mime type should be application/x-www-form-urlencoded in the post request. My http lib wasn't doing this out of the box.

View solution in original post

0 Karma

johandk
Path Finder

The mime type should be application/x-www-form-urlencoded in the post request. My http lib wasn't doing this out of the box.

0 Karma

rishiehari
Explorer

I have the same problem. So could you be more detailed in your explanation for this.

Thanks

0 Karma

johandk
Path Finder

Seems like overkill to do http basic auth on every request. Anyway, I figured it out. My http client lib wasn't sending the username, password values correctly. All is well now

0 Karma

Stephen_Sorkin
Splunk Employee
Splunk Employee

How are you trying to authenticate? The simplest way is to use HTTP basic auth and pass credentials with every call. Are you using the /services/auth/login call? Have you tried using your credentials to connect to the management port using a browser?

0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...