Security

How to pass Username and Password as a parameter via Splunk URL?

kiril123
Path Finder

I use the following URL to call Splunk dashboard and pass a device_name as a parameter:

http://splunk:8000/en-GB/app/search/device_search?form.event_data=%22%22&form.time.earliest=-24h%40h...

Is there a way to pass username and password via URL as well?

0 Karma
1 Solution

p_gurav
Champion

Hi you can try this:

In etc/system/local/web.conf, you can add following settings:

enable_insecure_login = [True | False]
* Indicates if the GET-based /account/insecurelogin endpoint is enabled
* Provides an alternate GET-based authentication mechanism
* If True, the following url is available:
http://localhost:8000/en-US/account/insecurelogin?loginType=splunk&username=noc&password=XXXXXXX
* If False, only the main /account/login endpoint is available
* Defaults to False

Restart splunk after updating settings.

View solution in original post

p_gurav
Champion

Hi you can try this:

In etc/system/local/web.conf, you can add following settings:

enable_insecure_login = [True | False]
* Indicates if the GET-based /account/insecurelogin endpoint is enabled
* Provides an alternate GET-based authentication mechanism
* If True, the following url is available:
http://localhost:8000/en-US/account/insecurelogin?loginType=splunk&username=noc&password=XXXXXXX
* If False, only the main /account/login endpoint is available
* Defaults to False

Restart splunk after updating settings.

kiril123
Path Finder

Hi,

Thank you for your answer. Is it possible to pass username/password credentials as well as device_name in a single URL?

0 Karma

p_gurav
Champion

Hi,

I am not sure if you can directly pass both parameter in same url but you can try using splunk SDK. Refere below link:
http://dev.splunk.com/view/python-sdk/SP-CAAAEK2

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...