search cancel

Symantec Advanced Threat Protection (ATP) APP for Splunk add on gets an error "Failed to authenticate host using provide credentials".


Article ID: 172266


Updated On:


Endpoint Detection and Response Advanced Threat Protection Platform


When trying to add new credentials in the Symantec ATP APP for Splunk add on gets an error " Failed to authenticate host using provide credentials" when trying to configure the Symantec Email Configuration.


1) Verify you can login to with the new username and password

2) Verify the new login has the appropriate permission assigned (View Statistics)

3) Verify you are able to log into

If you have verified all the above and still receiving the error message the passsword.conf may be corrupted, modify or deleted then you will want to uninstall the Symantec ATP add on APP from Splunk and reinstall the APP again then apply your credentials for the Symantec Email

Installation Guide