Splunk Search

How to disable methods from the https://localhost:8000 ?

sangsun0203
New Member

When I make
curl -v -X https://127.0.0.1:8000

It returns
Accept: all or any(/) it seems like all methods are working. It means that GET, POST, HEAD, OPTIONS are working.

But, I want make only working on get, post. Because, security reasons.
How could I make it?

Tags (1)
0 Karma
1 Solution

chrisyounger
SplunkTrust
SplunkTrust

You can't change it.

If this is really important to you, then put an NGINX or other type of reverse proxy in front of Splunk. Splunk on port 8000 uses all these verbs becuase it is also a REST service on some paths.

As far as security risks go, web servers that accept the extra verbs is an info-level risk in my opinion.

See also this post for a similar question about universal forwarders: https://answers.splunk.com/answers/715424/a-vulnerability-scan-revealed-that-http-options-me.html?ch...

View solution in original post

0 Karma

chrisyounger
SplunkTrust
SplunkTrust

You can't change it.

If this is really important to you, then put an NGINX or other type of reverse proxy in front of Splunk. Splunk on port 8000 uses all these verbs becuase it is also a REST service on some paths.

As far as security risks go, web servers that accept the extra verbs is an info-level risk in my opinion.

See also this post for a similar question about universal forwarders: https://answers.splunk.com/answers/715424/a-vulnerability-scan-revealed-that-http-options-me.html?ch...

0 Karma

sangsun0203
New Member

Thanks for your help! I spend whole my weekend for limitation of methods.

0 Karma

chrisyounger
SplunkTrust
SplunkTrust

happy I could be of help 🙂

0 Karma
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...