Splunk Dev

How to configure a different user other than admin for rest end point of Universal forwarder

nagar57
Communicator

How can I configure a different user and password other than admin to make rest end point calls to my Universal Forwader.
 Current Functionality: 

 

curl -k -u admin:changeme "https://<host>:<port>/services/receivers/simple?index=abc&source=test&sourcetype=test" -d "splunk rest test"

 

What I want:

 

curl -k -u mu_user:mypwd "https://<host>:<port>/services/receivers/simple?index=abc&source=test&sourcetype=test" -d "splunk rest test"

 

 

I tried putting this new user in authentication.conf with binddnuser and binddnpassword but it is throwing Unauthorized error.

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

The user must be a local account.  You cannot use a SAML or LDAP account.  It must be the account name and password configured when the UF was installed.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...