Splunk Dev

User does not exist error

mvdobrinin
Engager

I am seeing an error when attempting to use the REST API.

curl -X POST https://localhost:8089/servicesNS/admin/search/data/indexes -u splunkadmin:splunkadmin -d name=myindexname -k

The given request gives me an error about a completely different user.

<?xml version="1.0" encoding="UTF-8"?>
<response>
  <messages>
    <msg type="ERROR">User does not exist: admin</msg>
  </messages>
</response>

Looking at the configuration in Splunk Web, I don't even see such a user configured.

alt text

The version is as follows.
Splunk Enterprise
Version: 7.2.6
Build: c0bf0f679ce9

Any idea what's going on?

Tags (1)
0 Karma
1 Solution

VatsalJagani
SplunkTrust
SplunkTrust

Hi @mvdobrinin,

curl -X POST https://localhost:8089/servicesNS/splunkadmin/search/data/indexes -u splunkadmin:splunkadmin -d name=myindexname -k
In url also you need to use splunkadmin as you do not have admin user.

View solution in original post

VatsalJagani
SplunkTrust
SplunkTrust

Hi @mvdobrinin,

curl -X POST https://localhost:8089/servicesNS/splunkadmin/search/data/indexes -u splunkadmin:splunkadmin -d name=myindexname -k
In url also you need to use splunkadmin as you do not have admin user.

mvdobrinin
Engager

Thanks for the quick reply. That was the issue. The docs here were not clear on that.

0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

@mvdobrinin - In servicesNS/admin/search/, admin is user-name and search is app-name.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...