topic Splunk 6.5.0: Why is an embedded iframe in my dashboard not displaying? in Dashboards & Visualizations

Splunk 6.5.0: Why is an embedded iframe in my dashboard not displaying?

jackhamm25 — Sun, 07 Jun 2020 23:57:10 GMT

I'm having trouble getting this working in 6.5.0. I used this exact snippet from another question about iframes where they did get it working:

<dashboard>
  <label>Test</label>
    <row>
     <html>
     <h2>Embedded Web Page!</h2>
        <iframe src="http://www.splunk.com" width="100%" height="300" style="border:none;">></iframe>
     </html>
   </row>
</dashboard>

But what I see is:

Any thoughts on why the iframe wouldn't be displaying?

Re: Splunk 6.5.0: Why is an embedded iframe in my dashboard not displaying?

worshamn — Wed, 04 Jan 2017 22:44:02 GMT

I was having the same issue and I opened a support ticket with Splunk. iframe does work in 6.5.x but in the example (which has an extra ">") it is using http://www.splunk.com in which Splunk's support informed me prevents anyone from embedding their website inside an iframe (google does the same as well). There is a useful site to help see if a site allows being embedded in an iframe (which is related to "X-Frame-Options" header but apparently not the only way to stop it):
http://www.tinywebgallery.com/blog/advanced-iframe/free-iframe-checker
Try this code instead:

<dashboard>
  <row>
     <panel> 
        <title>Test iframe</title> 
        <html>
          <iframe src="https://www.cloudera.com" width="100%" height="300" style="border:none;"></iframe>
        </html>
      </panel>
  </row>
</dashboard>

Re: Splunk 6.5.0: Why is an embedded iframe in my dashboard not displaying?

woodcock — Fri, 22 May 2020 13:05:19 GMT

The problem that you are having is that recently Splunk has added some settings to control this type of content and defaulted dashboard_html_allow_embeddable_content to false. In order to get it to work, try enabling these settings in web.conf:

dashboard_html_allow_inline_styles = <boolean>
* Whether or not to allow style attributes from inline HTML elements in dashboards.
* If "false", style attributes from inline HTML elements in dashboards will be removed 
  to prevent potential attacks.
* Default: true

dashboard_html_allow_embeddable_content = <boolean>
* Whether or not to allow <embed> and <iframe> HTML elements in dashboards.
* If set to "true", <embed> and <iframe> HTML elements in dashboards will not be removed 
  and can lead to a potential security risk.
* If set to the default value of "false", <embed> and <iframe> HTML elements will be stripped
  from the dashboard HTML.
* Default: false

dashboard_html_wrap_embed = <boolean>
* Whether or not to wrap <embed> HTML elements in dashboards with an <iframe>.
* If set to "false", <embed> HTML elements in dashboards will not be wrapped, leading to
  a potential security risk.
* If set to "true", <embed> HTML elements will be wrapped by an <iframe sandbox> element to help
  mitigate potential security risks.
* Default: true

dashboard_html_allow_iframes = <boolean>
* Whether or not to allow iframes from HTML elements in dashboards.
* If "false", iframes from HTML elements in dashboards will be removed to prevent
  potential attacks.
* Default: true

Re: Splunk 6.5.0: Why is an embedded iframe in my dashboard not displaying?

vikashperiwal — Fri, 07 May 2021 17:07:48 GMT

I tried this in Splunk 8.0.6, but that did not work, I change this in system/local/web.conf n server.conf and also app/lical

Re: Splunk 6.5.0: Why is an embedded iframe in my dashboard not displaying?

TheFlash — Sat, 08 May 2021 12:51:49 GMT

try this, in your web.conf add these

[settings]

dashboard_html_allow_embeddable_content = true

dashboard_html_allowed_domains = <domain-name> (for. eg--> *.youtube.com)

Re: Splunk 6.5.0: Why is an embedded iframe in my dashboard not displaying?

vikashperiwal — Sat, 08 May 2021 14:35:28 GMT

Tried this , but no luck.....I see same error x-frame-options set to sameorigin

It's splunk 8.0.6

Re: Splunk 6.5.0: Why is an embedded iframe in my dashboard not displaying?

TheFlash — Sat, 08 May 2021 15:18:11 GMT

can you please share the code, which you are trying

Re: Splunk 6.5.0: Why is an embedded iframe in my dashboard not displaying?

vikashperiwal — Sat, 08 May 2021 17:21:36 GMT

This is something I tried

Web.conf--

dashboard_html_allow_inline_styles = true

dashboard_html_allow_embeddable_content= true

dashboard_html_allow_embeddable_content=true

dashboard_html_wrap_embed=true

dashboard_html_allow_iframes=true

dashboard_html_allowed_domains = https://youtube.com

Re: Splunk 6.5.0: Why is an embedded iframe in my dashboard not displaying?

TheFlash — Sat, 08 May 2021 19:22:52 GMT

replace "https://youtube.com" with *.youtube.com
It should work then

Re: Splunk 6.5.0: Why is an embedded iframe in my dashboard not displaying?

vikashperiwal — Sun, 09 May 2021 03:48:42 GMT

did not make any difference, I know this was work when doing this in splunk 8.1 but my splunk 8.0.6, it's still shown

X-frame-options to sameorigin

Re: Splunk 6.5.0: Why is an embedded iframe in my dashboard not displaying?

TheFlash — Mon, 10 May 2021 08:20:13 GMT

did you try setting this to 'false' in web.conf ?

x_frame_options_sameorigin = <boolean>
* adds a X-Frame-Options header set to "SAMEORIGIN" to every response served
* by cherrypy
* Default: true

Re: Splunk 6.5.0: Why is an embedded iframe in my dashboard not displaying?

vikashperiwal — Mon, 10 May 2021 08:24:30 GMT

Yes I tried that as well..

One curious thing....I see few of the example working fine like -https://intellectualpoint.com ...but when tried for https://tableau.com that did not work and I see same errror