Security

Current logged in user in 6.3

grossb
Explorer

Hello,
The current recommendations to use "| rest /services/authentication/current-context" to find the current logged in user do not work in 6.3.1. What is the alternative?

Thanks,
Brett

0 Karma
1 Solution

javiergn
SplunkTrust
SplunkTrust

Try specifying the local server:

| rest /services/authentication/current-contex splunk_server=local

View solution in original post

javiergn
SplunkTrust
SplunkTrust

Try specifying the local server:

| rest /services/authentication/current-contex splunk_server=local

View solution in original post

grossb
Explorer

This worked for me after fixing the typo. Thank you very much!

"| rest /services/authentication/current-context splunk_server=local"

0 Karma

dcarmack_splunk
Splunk Employee
Splunk Employee

Hi Brett

What specifically isn't working for you? The command works as expected for me.

0 Karma

grossb
Explorer

I kept getting "Splunk-System-User" as the username when using the command above. Adding "splunk_server=local" as noted in the answer brought the correct current logged in user.

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!