Security

Passing credentials in Splunk URL

pjsplunker
New Member

I am doing some load testing and need to pass uid and pwd in the Splunk URL. Generically, it looks like there are several ways to do it. Anyone have a sample that works ?

Thx..

Tags (1)
0 Karma

jonuwz
Influencer

Create a setcion in etc/system/local/web.conf like this :

[settings]
enable_insecure_login = True

Restart splunk

Now you can log in directly with

http://splunk:8000/en-US/account/insecurelogin?username=admin&password=changeme

jonuwz
Influencer

You might want to accept this answer if it worked for you so that other people can find it

0 Karma

jonuwz
Influencer

That is a terrible, terrible idea. Anyone looking at your source in the external app would be able to get splunk credentials.

i.e. I know your admin password is "smol"

and there's no use passing additional fields to the login screen. You probably want to re-direct it to a different page.

&return_to=%2Fen-GB%2Fapp%2Fmy_app%2Fmy_view

0 Karma

thunder_wu
Path Finder

There is a valid case. I want to use it for my local splunk free installation and prototyping. This way do not have to type admin/admin every time.

0 Karma

smolcj
Builder

some values from an external application bypassing splunk credentials. after reading this answer from jonuwz i think it will be a good idea when splunk is redirecting from some other applications with some values passing through the url.

0 Karma

Ayn
Legend

Purpose being what?

0 Karma

smolcj
Builder

can i pass an external value along with this?
something like idno=12234
http://localhost:8000/en-US/account/insecurelogin?username=admin&password=smol&srno=777

0 Karma

pjsplunker
New Member

Awesome, thanks !

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security: Your Command Center for PCI DSS Compliance

Every security professional knows the drill. The PCI DSS audit is approaching, and suddenly everyone's asking ...

Developer Spotlight with Guilhem Marchand

From Splunk Engineer to Founder: The Journey Behind TrackMe    After spending over 12 years working full time ...

Cisco Catalyst Center Meets Splunk ITSI: From 'Payments Are Down' to Root Cause in ...

The Problem: When Networks and Services Don't Talk Payment systems fail at a retail location. Customers are ...