Splunk Dev

How to use REST API and get auth via Okta app ?

RayJacobs
New Member

Hi all,

I am trying to find a way to use Rest API like search endpoint for splunk but my problem is my company use Okta application to login to splunk. So I can't have username or password for splunk so is there any ways to bypass this auth ?

Labels (2)
Tags (1)
0 Karma

PaulPanther
Motivator

Hello @RayJacobs 

you have to two options:

1. Create and use a local user

2. Create and use an authentication token (preferred solution)

 https://docs.splunk.com/Documentation/Splunk/9.0.3/Security/CreateAuthTok

0 Karma

RayJacobs
New Member

Hi @PaulPanther ,
1. How can I do this ? 
2. The page does not exist 

RayJacobs_0-1673395692567.png

 

0 Karma

PaulPanther
Motivator

@RayJacobs 

Oh, yes the link is broken.

Regarding the local user check out Create and manage users with Splunk Web - Splunk Documentation but as I already mentioned you should prefer that way Create authentication tokens - Splunk Documentation

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Meet the .conf26 AI Agent Buildathon Winners

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents ...

Trusted Autonomy in the SOC: A Maturity Journey

AI is compressing attacker timelines and pushing SOC teams beyond human capacity thresholds. The next SOC ...

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...