Security

Splunk and Webdav authentication support?

maverick
Splunk Employee
Splunk Employee

I would like to know specifically if Splunk supports WebDav (Hypertext Transfer Protocol [HTTP] with proper challenge and authentication)?

In other words, does Splunk support HTTP put?

gkanapathy
Splunk Employee
Splunk Employee

Unclear what exactly you mean. WebDAV is a document store interface (essentially) that runs over HTTP, and has nothing to do with authentication, though usually it will be behind some other HTTP-level authentication scheme.

It is not a producer of streamed data. Also, while you can mount a volume over WebDAV, I don't believe that you can effectively tail or stream a continuously updated log file. (It would depend on the WebDAV client, and even so I suspect it would be rather inefficient.) It is similar to FTP in this way. The client is not part of Splunk, but usually would be a utility in the OS.

So if there is a file somewhere that is accessible via WebDAV, I believe you would handle it the same way you'd handle a file that is accessible via FTP,using a scheduled script. You can experiment with mounting it as a volume in your OS and attempting to use "monitor". In both cases, the authentication would be handled outside of Splunk by the webdav client you use.

0 Karma
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...