Security

Passing credentials in Splunk URL

pjsplunker
New Member

I am doing some load testing and need to pass uid and pwd in the Splunk URL. Generically, it looks like there are several ways to do it. Anyone have a sample that works ?

Thx..

Tags (1)
0 Karma

jonuwz
Influencer

Create a setcion in etc/system/local/web.conf like this :

[settings]
enable_insecure_login = True

Restart splunk

Now you can log in directly with

http://splunk:8000/en-US/account/insecurelogin?username=admin&password=changeme

jonuwz
Influencer

You might want to accept this answer if it worked for you so that other people can find it

0 Karma

jonuwz
Influencer

That is a terrible, terrible idea. Anyone looking at your source in the external app would be able to get splunk credentials.

i.e. I know your admin password is "smol"

and there's no use passing additional fields to the login screen. You probably want to re-direct it to a different page.

&return_to=%2Fen-GB%2Fapp%2Fmy_app%2Fmy_view

0 Karma

thunder_wu
Path Finder

There is a valid case. I want to use it for my local splunk free installation and prototyping. This way do not have to type admin/admin every time.

0 Karma

smolcj
Builder

some values from an external application bypassing splunk credentials. after reading this answer from jonuwz i think it will be a good idea when splunk is redirecting from some other applications with some values passing through the url.

0 Karma

Ayn
Legend

Purpose being what?

0 Karma

smolcj
Builder

can i pass an external value along with this?
something like idno=12234
http://localhost:8000/en-US/account/insecurelogin?username=admin&password=smol&srno=777

0 Karma

pjsplunker
New Member

Awesome, thanks !

0 Karma
Get Updates on the Splunk Community!

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...