<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Handling HTML in an field in All Apps and Add-ons</title>
    <link>https://community.splunk.com/t5/All-Apps-and-Add-ons/Handling-HTML-in-an-field/m-p/363446#M43879</link>
    <description>&lt;P&gt;I just got my Qualys TA to start pulling the full KB down, but now I see it uses HTML in several of the fields.  What's the best way to display this to my end users?  Here's an example.  I've seen &lt;A href="https://answers.splunk.com/answers/4541/having-event-viewer-render-the-html-in-a-field.html"&gt;the answer here&lt;/A&gt; that proposes using Sideview.  I might look into that, but I was hoping for a more straightforward method.  Anyone have any ideas?&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;Patch -&amp;lt;BR&amp;gt; There are no vendor-supplied patches available at this time. &amp;lt;P&amp;gt; Workaround:&amp;amp;lt;br/&amp;amp;gt; - Server-specific recommendations can be found &amp;lt;A HREF='https://community.qualys.com/blogs/securitylabs/2011/11/02/how-to-protect-against-slow-http-attacks' TARGET='_blank'&amp;gt;here&amp;lt;/A&amp;gt;.&amp;lt;P&amp;gt; - Countermeasures for Apache are described &amp;lt;A HREF='http://httpd.apache.org/docs/trunk/misc/security_tips.html#dos' TARGET='_blank'&amp;gt;here&amp;lt;/A&amp;gt;.&amp;lt;P&amp;gt; - Reverse proxies, load balancers and iptables can help to prevent this attack from occurring.&amp;lt;P&amp;gt; - Adjusting the &amp;lt;A HREF='http://httpd.apache.org/docs/2.2/mod/core.html#timeout' TARGET='_blank'&amp;gt;TimeOut Directive&amp;lt;/A&amp;gt; can also prevent this attack from occurring.&amp;lt;P&amp;gt; - A new module &amp;lt;A HREF='http://httpd.apache.org/docs/2.2/mod/mod_reqtimeout.html' TARGET='_blank'&amp;gt;mod_reqtimeout&amp;lt;/A&amp;gt; has been introduced since Apache 2.2.15 to provide tools for mitigation against these forms of attack. &amp;lt;P&amp;gt; Also refer to &amp;lt;A HREF='http://www.cert.org/blogs/certcc/2009/07/slowloris_vs_your_webserver.html' TARGET='_blank'&amp;gt;Cert Blog&amp;lt;/A&amp;gt; and &amp;lt;A HREF='http://bedagainstthewall.blogspot.com/2011/01/slowloris-and-mitigations-for-apache.html' TARGET='_blank'&amp;gt;Slowloris and Mitigations for Apache document&amp;lt;/A&amp;gt; for further information.    
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Thu, 16 Nov 2017 02:18:14 GMT</pubDate>
    <dc:creator>xavierashe</dc:creator>
    <dc:date>2017-11-16T02:18:14Z</dc:date>
    <item>
      <title>Handling HTML in an field</title>
      <link>https://community.splunk.com/t5/All-Apps-and-Add-ons/Handling-HTML-in-an-field/m-p/363446#M43879</link>
      <description>&lt;P&gt;I just got my Qualys TA to start pulling the full KB down, but now I see it uses HTML in several of the fields.  What's the best way to display this to my end users?  Here's an example.  I've seen &lt;A href="https://answers.splunk.com/answers/4541/having-event-viewer-render-the-html-in-a-field.html"&gt;the answer here&lt;/A&gt; that proposes using Sideview.  I might look into that, but I was hoping for a more straightforward method.  Anyone have any ideas?&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;Patch -&amp;lt;BR&amp;gt; There are no vendor-supplied patches available at this time. &amp;lt;P&amp;gt; Workaround:&amp;amp;lt;br/&amp;amp;gt; - Server-specific recommendations can be found &amp;lt;A HREF='https://community.qualys.com/blogs/securitylabs/2011/11/02/how-to-protect-against-slow-http-attacks' TARGET='_blank'&amp;gt;here&amp;lt;/A&amp;gt;.&amp;lt;P&amp;gt; - Countermeasures for Apache are described &amp;lt;A HREF='http://httpd.apache.org/docs/trunk/misc/security_tips.html#dos' TARGET='_blank'&amp;gt;here&amp;lt;/A&amp;gt;.&amp;lt;P&amp;gt; - Reverse proxies, load balancers and iptables can help to prevent this attack from occurring.&amp;lt;P&amp;gt; - Adjusting the &amp;lt;A HREF='http://httpd.apache.org/docs/2.2/mod/core.html#timeout' TARGET='_blank'&amp;gt;TimeOut Directive&amp;lt;/A&amp;gt; can also prevent this attack from occurring.&amp;lt;P&amp;gt; - A new module &amp;lt;A HREF='http://httpd.apache.org/docs/2.2/mod/mod_reqtimeout.html' TARGET='_blank'&amp;gt;mod_reqtimeout&amp;lt;/A&amp;gt; has been introduced since Apache 2.2.15 to provide tools for mitigation against these forms of attack. &amp;lt;P&amp;gt; Also refer to &amp;lt;A HREF='http://www.cert.org/blogs/certcc/2009/07/slowloris_vs_your_webserver.html' TARGET='_blank'&amp;gt;Cert Blog&amp;lt;/A&amp;gt; and &amp;lt;A HREF='http://bedagainstthewall.blogspot.com/2011/01/slowloris-and-mitigations-for-apache.html' TARGET='_blank'&amp;gt;Slowloris and Mitigations for Apache document&amp;lt;/A&amp;gt; for further information.    
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Thu, 16 Nov 2017 02:18:14 GMT</pubDate>
      <guid>https://community.splunk.com/t5/All-Apps-and-Add-ons/Handling-HTML-in-an-field/m-p/363446#M43879</guid>
      <dc:creator>xavierashe</dc:creator>
      <dc:date>2017-11-16T02:18:14Z</dc:date>
    </item>
    <item>
      <title>Re: Handling HTML in an field</title>
      <link>https://community.splunk.com/t5/All-Apps-and-Add-ons/Handling-HTML-in-an-field/m-p/363447#M43880</link>
      <description>&lt;P&gt;I decided to use this a good reason to build my first app.  I've submitted it to SplunkBase.  In the meantime, it's posted over here: &lt;A href="https://github.com/rubix1138/html2text"&gt;https://github.com/rubix1138/html2text&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Sun, 19 Nov 2017 02:07:40 GMT</pubDate>
      <guid>https://community.splunk.com/t5/All-Apps-and-Add-ons/Handling-HTML-in-an-field/m-p/363447#M43880</guid>
      <dc:creator>xavierashe</dc:creator>
      <dc:date>2017-11-19T02:07:40Z</dc:date>
    </item>
  </channel>
</rss>

