Security

running splunk cmds via SAML account

Esky73
Builder

How can i run splunk cmds (that require me to authenticate) from cmd line using my AD account - i have tried several things but have been unsuccessful so far. The workround i have is to use a local account which works fine.

SAML credentials are in the format : DOMAIN\username

Tried:

DOMAIN\username
username
DOMAIN\\username

Tags (1)
0 Karma
1 Solution

chrisyounger
SplunkTrust
SplunkTrust

chrisyounger
SplunkTrust
SplunkTrust

Hi Esky73

Unfortunately you can't use CLI commands with SAML accounts: https://docs.splunk.com/Documentation/Splunk/7.0.0/Security/TroubleshootSAMLSSO#Cannot_authenticate_...

Esky73
Builder

Thanks rtfm for me...

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...