Using elasticsplunk with elasticsearch using readonlyREST about elasticsplunk HOT 5 OPEN

from elasticsplunk.

credentials are passed through kibana which in turn connects to elasticsearch client.
how ever i am not getting any error when i use command in below format.
| ess eaddr="http://username:password@hostname:port" index="" query=""

i was thinking if its possible to get the username and password with which the user logged in to the splunk and insert them in the esaddr.

from elasticsplunk.

from elasticsplunk.

Hi @1tarak,

i didn't had the time to investigate this further, you managed to get this working?

Thanks

from elasticsplunk.

hi @brunotm @1vish99

I am trying to get the basic cluster health status using the app

Curl works -

curl -u usernam:password -XGET "https://elasticsearchdev.domain.com:443/_cluster/health"?pretty

{
"cluster_name" : "newdev",
"status" : "green",
"timed_out" : false,
"number_of_nodes" : 2,
"number_of_data_nodes" : 2,
"active_primary_shards" : 1608,
"active_shards" : 3216,
"relocating_shards" : 0,
"initializing_shards" : 0,
"unassigned_shards" : 0,
"delayed_unassigned_shards" : 0,
"number_of_pending_tasks" : 0,
"number_of_in_flight_fetch" : 0,
"task_max_waiting_in_queue_millis" : 0,
"active_shards_percent_as_number" : 10.0
}

How do I make this work using the app ?

from elasticsplunk.