topic Re: How to map metadata ACS value to a public domain? in Splunk Search

How to map metadata ACS value to a public domain?

jameszeng — Mon, 04 Jun 2018 02:45:11 GMT

Hi, I have deployed a splunk enterprise server on AWS ec2 so that I have a public domain name.

When I configure the IDP, I need to enter the ACS value from Service Provider splunk.
But my issue here is that in my metadata, the ACS value shows my server hostname when I fill it in IDP, it cannot be redirected back to Splunk after authentication. I changed the hostname with the domain name in Splunk settings, but the metadata did not change.

How can I map them so that IDP could redirect back to Splunk?
Thanks

Re: How to map metadata ACS value to a public domain?

felipesewaybric — Fri, 22 Jun 2018 15:58:19 GMT

Once I have a similar problem with metadata, then I use Nginx to control the redirections.

Re: How to map metadata ACS value to a public domain?

woodcock — Fri, 22 Jun 2018 17:50:54 GMT

I am sure that I am not understanding your problem so this may not help but you can control how any Splunk forwarder self-identifies with these commands:

$SPLUNK_HOME/bin/splunk set servername
$SPLUNK_HOME/bin/splunk set default-hostname

There are also show versions of these commands:

$SPLUNK_HOME/bin/splunk show servername
$SPLUNK_HOME/bin/splunk show default-hostname