Security

Passing credentials in Splunk URL

pjsplunker
New Member

I am doing some load testing and need to pass uid and pwd in the Splunk URL. Generically, it looks like there are several ways to do it. Anyone have a sample that works ?

Thx..

Tags (1)
0 Karma

jonuwz
Influencer

Create a setcion in etc/system/local/web.conf like this :

[settings]
enable_insecure_login = True

Restart splunk

Now you can log in directly with

http://splunk:8000/en-US/account/insecurelogin?username=admin&password=changeme

jonuwz
Influencer

You might want to accept this answer if it worked for you so that other people can find it

0 Karma

jonuwz
Influencer

That is a terrible, terrible idea. Anyone looking at your source in the external app would be able to get splunk credentials.

i.e. I know your admin password is "smol"

and there's no use passing additional fields to the login screen. You probably want to re-direct it to a different page.

&return_to=%2Fen-GB%2Fapp%2Fmy_app%2Fmy_view

0 Karma

thunder_wu
Path Finder

There is a valid case. I want to use it for my local splunk free installation and prototyping. This way do not have to type admin/admin every time.

0 Karma

smolcj
Builder

some values from an external application bypassing splunk credentials. after reading this answer from jonuwz i think it will be a good idea when splunk is redirecting from some other applications with some values passing through the url.

0 Karma

Ayn
Legend

Purpose being what?

0 Karma

smolcj
Builder

can i pass an external value along with this?
something like idno=12234
http://localhost:8000/en-US/account/insecurelogin?username=admin&password=smol&srno=777

0 Karma

pjsplunker
New Member

Awesome, thanks !

0 Karma
Get Updates on the Splunk Community!

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...