Splunk Enterprise

Why is there Error 404 when using Splunk sdk python?


Hi everyone,

I'm starting using Splunk SDK Python.

I'm using Python 3.8 and Splunk 9.0

I get error: HTTP 404 action forbidden. I don't understand why and how to fix it.

Here is my code: 

import splunklib.client as client

import splunklib.results as results

def connect_to_splunk(username, password, host='localhost', port='8089', owner='admin', app='search', sharing='user'):

try: service = client.connect(host=host, port=port, username=username, password=password, owner=owner, app=app, sharing=sharing)

if service:

print("Connected successfully!")

return service

except Exception as e:


def run_normal_mode_search(splunk_service, search_string, payload={}):

try: job = splunk_service.jobs.create(search_string, **payload) # print(job.content)

# check if the job is completed or not

while True:

while not job.is_ready():

pass if job["isDone"] == "1":


for result in results.ResultsReader(job.results()):


except Exception as e:


def main():


splunk_service = connect_to_splunk(username='xxx', password='xxx')

search_string = "search index= haindex1 |top host"

payload = {"exec_mode": "normal"}

run_normal_mode_search(splunk_service, search_string, payload)

except Exception as e:


if _name_ == "_main_": main()

Here is the result:

Connected successfully!

HTTP 404 Not Found -- Action forbidden.

Process finished with exit code 0


Thanks and have a nice day!



Labels (3)
0 Karma

New Member

I have the same issue.

0 Karma
Get Updates on the Splunk Community!

Tips & Tricks When Using Ingest Actions

Tune in to learn about:Large scale architecture when using Ingest ActionsRegEx performance considerations ...

Announcing Our Splunk MVPs

We are excited to announce the first cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Dashboard Studio Challenge - Learn New Tricks, Showcase Your Skills, and Win Prizes!

Reimagine what you can do with your dashboards. Dashboard Studio is Splunk’s newest dashboard builder to ...