Security

Cant authenticate with Splunk API ??

johandk
Path Finder

When trying to authenticate to the API I keep getting Login Failed messages.

I have changed the admin password as the docs suggest. Should I be logging in with admin?

Are there any server configs I should check?

Thanks

Tags (2)
0 Karma
1 Solution

johandk
Path Finder

The mime type should be application/x-www-form-urlencoded in the post request. My http lib wasn't doing this out of the box.

View solution in original post

0 Karma

johandk
Path Finder

The mime type should be application/x-www-form-urlencoded in the post request. My http lib wasn't doing this out of the box.

0 Karma

rishiehari
Explorer

I have the same problem. So could you be more detailed in your explanation for this.

Thanks

0 Karma

johandk
Path Finder

Seems like overkill to do http basic auth on every request. Anyway, I figured it out. My http client lib wasn't sending the username, password values correctly. All is well now

0 Karma

Stephen_Sorkin
Splunk Employee
Splunk Employee

How are you trying to authenticate? The simplest way is to use HTTP basic auth and pass credentials with every call. Are you using the /services/auth/login call? Have you tried using your credentials to connect to the management port using a browser?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Vibe-coding, AI, and Splunkcraft: Highlights from the .conf26 Builder Bar

If you stopped by the Builder Bar at .conf26, thank you! This year, we brought ...

Thanks for the Memories: .conf26 Took Learning to New Heights

Thank you, Splunk Community, for making .conf26 in Denver one for the books. From packed Splunk University ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...