User does not exist error

[mvdobrinin]

I am seeing an error when attempting to use the REST API.

curl -X POST https://localhost:8089/servicesNS/admin/search/data/indexes -u splunkadmin:splunkadmin -d name=myindexname -k

The given request gives me an error about a completely different user.

<?xml version="1.0" encoding="UTF-8"?>
<response>
  <messages>
    <msg type="ERROR">User does not exist: admin</msg>
  </messages>
</response>

Looking at the configuration in Splunk Web, I don't even see such a user configured.

The version is as follows.
Splunk Enterprise
Version: 7.2.6
Build: c0bf0f679ce9

Any idea what's going on?

[VatsalJagani · Accepted solution]

Hi @mvdobrinin,

curl -X POST https://localhost:8089/servicesNS/splunkadmin/search/data/indexes -u splunkadmin:splunkadmin -d name=myindexname -k
In url also you need to use splunkadmin as you do not have admin user.

[mvdobrinin]

Thanks for the quick reply. That was the issue. The docs here were not clear on that.

[VatsalJagani]

@mvdobrinin - In servicesNS/admin/search/, admin is user-name and search is app-name.