Splunk Dev

Does Splunk supports OAuth for REST API ?

vallabhk
Engager

Could you help us in confirming whether Splunk REST APIs supports OAuth authentication apart from the existing basic authentication(username/password) and authentication tokens(link). ? We see a lot of customers enquiring about it. 

Also, is it mandatory to always use an authentication token mechanism for a service account in Splunk or can we use a username/password as well ?

@sloshburch 

Labels (1)
0 Karma
1 Solution

murenkot
Splunk Employee
Splunk Employee

Splunk REST APIs don't support OAuth authentication.  But maybe this solution with a web server or LDAP will help you: https://community.splunk.com/t5/Security/Does-Splunk-support-oAuth-2-0-single-sign-on/m-p/292745/hig... 

You can use a username/password for a Service Account but you'll need to give the Service Account access to read the information you want Splunk to be able to collect/access. It only needs read rights. 

You can find examples of how to use username/password in requests here: https://docs.splunk.com/Documentation/Splunk/latest/RESTUM/RESTusing

or you can use authentification with Python script and use a session key in your requests: https://docs.splunk.com/Documentation/Splunk/8.2.4/RESTTUT/RESTsearches

View solution in original post

murenkot
Splunk Employee
Splunk Employee

Splunk REST APIs don't support OAuth authentication.  But maybe this solution with a web server or LDAP will help you: https://community.splunk.com/t5/Security/Does-Splunk-support-oAuth-2-0-single-sign-on/m-p/292745/hig... 

You can use a username/password for a Service Account but you'll need to give the Service Account access to read the information you want Splunk to be able to collect/access. It only needs read rights. 

You can find examples of how to use username/password in requests here: https://docs.splunk.com/Documentation/Splunk/latest/RESTUM/RESTusing

or you can use authentification with Python script and use a session key in your requests: https://docs.splunk.com/Documentation/Splunk/8.2.4/RESTTUT/RESTsearches

Get Updates on the Splunk Community!

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

The Latest Cisco Integrations With Splunk Platform!

Join us for an exciting tech talk where we’ll explore the latest integrations in Cisco + Splunk! We’ve ...

AI Adoption Hub Launch | Curated Resources to Get Started with AI in Splunk

Hey Splunk Practitioners and AI Enthusiasts! It’s no secret (or surprise) that AI is at the forefront of ...