Security

Why can't I bump Splunk using https:///en-US/_bump and get error message "Forbidden"?

Path Finder

I am trying to bump a local Splunk instance using : https:///en-US/_bump
but I receive the following:

<response> <messages> <msg type="ERROR">Forbidden</msg> </messages> </response>

This looks like an authentication/authorization error.
I am running Splunk 6.4 (Free license)

What am I doing wrong?

0 Karma
1 Solution

Champion

The free license supports neither _bump nor debug/refresh. You'll have to restart your server, as you already noted.

View solution in original post

Path Finder

Note that you also have to login before you attempt a successful bump.

0 Karma

Champion

The free license supports neither _bump nor debug/refresh. You'll have to restart your server, as you already noted.

View solution in original post

Communicator
  • try to got to en-US/info an hit the "Static resource cache control" - same error?
  • try to hit (on the same page ) "EAI object refresh"

btw.: Admin rights?

Path Finder

I found a work around...
Settings>Server Controls>Restart Splunk

0 Karma

Path Finder

same results for

en-US/info an hit the "Static resource cache control" - same error?
AND
try to hit (on the same page ) "EAI object refresh"

Since this is the free version, it doesnt support user accounts or roles, so I can't explicitly add myself to a splunk admin role.

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!