cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
daniel_kwok72
Explorer
Member since: ‎10-14-2013
‎06-05-2020
Community Statistics
Posts 5
Solutions 0
Karma Given 0
Karma Received 1
Member Since ‎10-14-2013
Activity Feed
View All

Re: Authenticate to REST API through LDAP or SAML?

by in Security
‎10-26-2017 04:01 PM
‎10-26-2017 04:01 PM
I am facing the same issue here, I do notice Splunk mentioned this on the Splunk Cloud REST API documentation: "You cannot use SAML authentication with the REST API. ". Not sure if the same applies to Splunk Enterprise. ... View more

Re: Authenticate to REST API through LDAP or SAML?

by in Security
‎10-26-2017 03:58 PM
‎10-26-2017 03:58 PM
I am keen to see what you are doing to resolve this issue. Have you contacted Splunk support in regards to this? ... View more

Re: Authenticate to REST API through LDAP or SAML?

by in Security
‎10-26-2017 03:57 PM
‎10-26-2017 03:57 PM
I am facing the same issue here. We have SAML configured for the web access, but I am not able to use the same AD credential to authenticate to the API. I am getting "Login Failed" as the response from the API. I noted that on the Splunk Cloud documentation, it mentions that "You cannot use SAML authentication with the REST API. ", will this apply to Splunk Enterprise as well? Is this a production limitation or is there a different to configure SAML to get around the issue? ... View more

Re: Why does "splunk show shcluster-status" show "...

by in Deployment Architecture
‎05-04-2017 05:03 PM
‎05-04-2017 05:03 PM
Hi markusspitzli2 Did Splunk Support advise in which release this bug will be fixed? Splunk 6.6 is recently released but when I went through the release note, I couldn't find the bug fix mentioned. ... View more

Why does "splunk show shcluster-status" show "last...

by in Deployment Architecture
‎10-30-2016 07:32 PM
1 Karma
‎10-30-2016 07:32 PM
1 Karma
Hi Recently I upgraded my Splunk environment from 6.3.2 to 6.5.0. The environment has a search head cluster, an indexer cluster, and the manager server. After the upgrade, when I run the splunk show shcluster-status , I noticed there is a new status called last_conf_replication and it always shows Pending for the search head members, but the search head captain doesn't have this. The replication is running fine in the Indexer cluster, so I am not quite sure what this new option is about and how to get the replication finished. Can anyone shed some lights on this? Thank you. ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM
Karma from
View All