Splunk Search

Getting authentication error when session login fails in Azure Databricks.

sbuxplat
Observer

Hi All,

I am trying to access Splunk from inside the Azure Databricks instances. I have requirements to run queries for the period of 6 hours. I break it down into 30 minute windows and submit the jobs. For each window, I send the query using Python splunklib, execute it, and then persist the result and finally delete my job. Then I try the next window, and so on. However, what happens it works for the first 2 or 3 windows without any issues but it fails on the next one with authentication issues. This was running without any issue before 2 weeks. 

Code Used to authenticate: 

client.connect(host=splunk_auth_params["host"], username=splunk_auth_params["uname"], password=splunk_auth_params["password"])

Error:

AuthenticationError: Request failed: Session is not logged in.
HTTPError: HTTP 401 Unauthorized -- call not properly authenticated During handling of the above exception, another exception occurred:

I am using Python splunklib. Any help would be greatly appreciated.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Casting Call: Compete in Cyber Games

Lights, Camera, SecOps: Apply to Compete in Cyber Games     Think you have what it takes to beat the clock? ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

How Edge Processor's Durable Queue Works

Edge Processor sits in one of the most consequential places in any Splunk pipeline: between your data sources ...