Developing for Splunk Platform

How to configure a different user other than admin for rest end point of Universal forwarder


How can I configure a different user and password other than admin to make rest end point calls to my Universal Forwader.
 Current Functionality: 


curl -k -u admin:changeme "https://<host>:<port>/services/receivers/simple?index=abc&source=test&sourcetype=test" -d "splunk rest test"


What I want:


curl -k -u mu_user:mypwd "https://<host>:<port>/services/receivers/simple?index=abc&source=test&sourcetype=test" -d "splunk rest test"



I tried putting this new user in authentication.conf with binddnuser and binddnpassword but it is throwing Unauthorized error.

Labels (1)
0 Karma


The user must be a local account.  You cannot use a SAML or LDAP account.  It must be the account name and password configured when the UF was installed.

If this reply helps you, an upvote would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...