Splunk Search

How to disable methods from the https://localhost:8000 ?

sangsun0203
New Member

When I make
curl -v -X https://127.0.0.1:8000

It returns
Accept: all or any(/) it seems like all methods are working. It means that GET, POST, HEAD, OPTIONS are working.

But, I want make only working on get, post. Because, security reasons.
How could I make it?

Tags (1)
0 Karma
1 Solution

chrisyounger
SplunkTrust
SplunkTrust

You can't change it.

If this is really important to you, then put an NGINX or other type of reverse proxy in front of Splunk. Splunk on port 8000 uses all these verbs becuase it is also a REST service on some paths.

As far as security risks go, web servers that accept the extra verbs is an info-level risk in my opinion.

See also this post for a similar question about universal forwarders: https://answers.splunk.com/answers/715424/a-vulnerability-scan-revealed-that-http-options-me.html?ch...

View solution in original post

0 Karma

chrisyounger
SplunkTrust
SplunkTrust

You can't change it.

If this is really important to you, then put an NGINX or other type of reverse proxy in front of Splunk. Splunk on port 8000 uses all these verbs becuase it is also a REST service on some paths.

As far as security risks go, web servers that accept the extra verbs is an info-level risk in my opinion.

See also this post for a similar question about universal forwarders: https://answers.splunk.com/answers/715424/a-vulnerability-scan-revealed-that-http-options-me.html?ch...

0 Karma

sangsun0203
New Member

Thanks for your help! I spend whole my weekend for limitation of methods.

0 Karma

chrisyounger
SplunkTrust
SplunkTrust

happy I could be of help 🙂

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud’s AI Assistant in Action Series: Analyzing and ...

This is the second post in our Splunk Observability Cloud’s AI Assistant in Action series, in which we look at ...

Elevate Your Organization with Splunk’s Next Platform Evolution

 Thursday, July 10, 2025  |  11AM PDT / 2PM EDT Whether you're managing complex deployments or looking to ...

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...