Security

Cant authenticate with Splunk API ??

johandk
Path Finder

When trying to authenticate to the API I keep getting Login Failed messages.

I have changed the admin password as the docs suggest. Should I be logging in with admin?

Are there any server configs I should check?

Thanks

Tags (2)
0 Karma
1 Solution

johandk
Path Finder

The mime type should be application/x-www-form-urlencoded in the post request. My http lib wasn't doing this out of the box.

View solution in original post

0 Karma

johandk
Path Finder

The mime type should be application/x-www-form-urlencoded in the post request. My http lib wasn't doing this out of the box.

0 Karma

rishiehari
Explorer

I have the same problem. So could you be more detailed in your explanation for this.

Thanks

0 Karma

johandk
Path Finder

Seems like overkill to do http basic auth on every request. Anyway, I figured it out. My http client lib wasn't sending the username, password values correctly. All is well now

0 Karma

Stephen_Sorkin
Splunk Employee
Splunk Employee

How are you trying to authenticate? The simplest way is to use HTTP basic auth and pass credentials with every call. Are you using the /services/auth/login call? Have you tried using your credentials to connect to the management port using a browser?

0 Karma
Get Updates on the Splunk Community!

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...