https://community.splunk.com/t5/Dashboards-Visualizations/X-Frame-Options-remove-deny-set-sameorigin/m-p/401400#M42595 <P>You can't set it to sameorigin. You can only remove the header all together as you have seen by changing <CODE>web.conf</CODE> and setting <CODE>x_frame_options_sameorigin = false</CODE>. This will mean you can then embed Splunk in a frame if you want.</P> <P>If it is important that you set the header to be sameorigin then you would need to use something like a nginx proxy over the top of Splunk. (fairly easy to do)</P> Tue, 19 Feb 2019 11:00:50 GMT chrisyounger 2019-02-19T11:00:50Z https://community.splunk.com/t5/Dashboards-Visualizations/X-Frame-Options-remove-deny-set-sameorigin/m-p/401399#M42594 <P>Hi, my problem is explained in the heading. I need to remove X-Frame-Options: deny from the HTTP header and change it to sameorigin. Possible it is in web.conf. Any help is advisable. </P> Tue, 19 Feb 2019 10:47:45 GMT https://community.splunk.com/t5/Dashboards-Visualizations/X-Frame-Options-remove-deny-set-sameorigin/m-p/401399#M42594 darioapis 2019-02-19T10:47:45Z https://community.splunk.com/t5/Dashboards-Visualizations/X-Frame-Options-remove-deny-set-sameorigin/m-p/401400#M42595 <P>You can't set it to sameorigin. You can only remove the header all together as you have seen by changing <CODE>web.conf</CODE> and setting <CODE>x_frame_options_sameorigin = false</CODE>. This will mean you can then embed Splunk in a frame if you want.</P> <P>If it is important that you set the header to be sameorigin then you would need to use something like a nginx proxy over the top of Splunk. (fairly easy to do)</P> Tue, 19 Feb 2019 11:00:50 GMT https://community.splunk.com/t5/Dashboards-Visualizations/X-Frame-Options-remove-deny-set-sameorigin/m-p/401400#M42595 chrisyounger 2019-02-19T11:00:50Z