# HTTP POLLER NTLM AUTH

**URL:** <https://discuss.elastic.co/t/http-poller-ntlm-auth/245683>\
**Category:** Logstash\
**Created:** [August 19, 2020, 9:50pm UTC](https://discuss.elastic.co/t/http-poller-ntlm-auth/245683 "2020-08-19T21:50:15Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![gutierrezfj](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gutierrezfj/32/92727_2.png) [@gutierrezfj](https://discuss.elastic.co/u/gutierrezfj)\
**Post date:** [August 19, 2020, 9:50pm UTC](https://discuss.elastic.co/t/http-poller-ntlm-auth/245683/1 "2020-08-19T21:50:15Z")

</div>

What is the parameter for an NTML type authentication using HTTP POLLER?.  
I need to verify the response of many websites but first I must go through the NTML authentication.  
I appreciate your help!

---

<div class="post-metadata">

**Author:** ![cknz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cknz/32/9640_2.png) [@cknz](https://discuss.elastic.co/u/cknz)\
**Post date:** [August 20, 2020, 5:04am UTC](https://discuss.elastic.co/t/http-poller-ntlm-auth/245683/2 "2020-08-20T05:04:29Z")

</div>

If you go to a site that support NTLM in a browser that doesn't support NTLM (eg. Firefox; earlier Chrome), you should find that username/password will be supported.

So username and password authentication should normally work. There is no NTLM / integrated-auth functionality.

However, I've done some similar sort of things before (not with Logstash) whereby I needed to get some data from websites that implemement various styles of SSO. For this, I would suggest using Selenium in a Docker container (makes maintainance a breeze; you don't need to worry about setting up a browser with webdriver) and use some Python (or whatever you prefer) to drive your Selenium through whatever sign-in process you need. Then you can get the page you need, and throw that to logstash (or to a queue for logstash to pick up).

> **[SeleniumHQ/docker-selenium](https://github.com/SeleniumHQ/docker-selenium)**
>
> Docker images for the Selenium Grid Server. Contribute to SeleniumHQ/docker-selenium development by creating an account on GitHub.

  
[https://selenium-python.readthedocs.io/](https://selenium-python.readthedocs.io/)

This is the approach I'm taking with our application monitoring internally at work; although logstash isn't involved in that, but it certainly works nicely. I haven't used it with NTLM though; but there are certainly pointers online.

Hope that helps,  
Cameron

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 17, 2020, 5:04am UTC](https://discuss.elastic.co/t/http-poller-ntlm-auth/245683/3 "2020-09-17T05:04:31Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.