Splunk Dev

How to configure a different user other than admin for rest end point of Universal forwarder

nagar57
Communicator

How can I configure a different user and password other than admin to make rest end point calls to my Universal Forwader.
 Current Functionality: 

 

curl -k -u admin:changeme "https://<host>:<port>/services/receivers/simple?index=abc&source=test&sourcetype=test" -d "splunk rest test"

 

What I want:

 

curl -k -u mu_user:mypwd "https://<host>:<port>/services/receivers/simple?index=abc&source=test&sourcetype=test" -d "splunk rest test"

 

 

I tried putting this new user in authentication.conf with binddnuser and binddnpassword but it is throwing Unauthorized error.

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

The user must be a local account.  You cannot use a SAML or LDAP account.  It must be the account name and password configured when the UF was installed.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...