Join the Conversation
- Find Answers
- :
- Splunk Administration
- :
- Admin Other
- :
- Security
- :
- Re: Unable to get REST API Token
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
I am trying to get an auth token for REST API login, and it keeps saying "login failed". However, if I go to the gui, I can login with those same credentials.
I am accessing https://<host:port>/servicesNS/admin/search/auth/login.
Am I missing something?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Can you give a better example of how you are trying to authenticate ? A Curl command perhaps ?
FYI : this works :
curl -k https://localhost:8089/services/auth/login -d username=admin -d password=foobar
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Can you give a better example of how you are trying to authenticate ? A Curl command perhaps ?
FYI : this works :
curl -k https://localhost:8089/services/auth/login -d username=admin -d password=foobar
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
curl -k -u srvFFAS:ChangeMe https://artp449:8089/servicesNS/admin/search/auth/login
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Splunk documentation is not correct for version 6- REST API
REF-- wrong end point in the doc:
http://dev.splunk.com/view/SP-CAAADQT
--for end point --> /servicesNS/admin/search/auth/login does NOT work and results "Login Failed"
where as the end point below
/services/auth/login works.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
So obviously that differs from the correct example I gave you. Can you confirm that my answer worked for you and if so accept the Answer ? Thanks.
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
Data Management Digest – May 2026
Index This | What is feather-light but cannot be held long?
.conf26 Registration is Live: Secure Your Early Bird Pass Now
