Building for the Splunk Platform

Splunk Cloud and iframes


I'd like to create an app with dashboards that rely on iframes.  To do this in Splunk Enterprise I know that the app's web.conf has to include the following:






However, I'd like to use this app with a Splunk Cloud instance and when I run splunk-appinspect (with --mode precert --included-tags cloud) against the app I encounter the following failure:



Web.conf File Standards Ensure that web.conf is safe for cloud deployment and
that any exposed patterns match endpoints defined by the app - apps should not expose endpoints other than their own. Including web.conf can have adverse impacts for cloud. Allow only [endpoint:*] and [expose:*] stanzas, with expose only containing pattern= and methods= properties. web.conf

Check that web.conf only defines [endpoint:] and [expose:] stanzas, with [expose:*] only containing pattern= and methods=.

FAILURE: Only the [endpoint:*] and [expose:*] stanzas are permitted in web.conf for cloud. Please remove this stanza from web.conf: [settings]. File: default/web.conf Line Number: 1



Is there any way to enable embedded content for dashboards using iframes for apps in Splunk Cloud that will pass the splunk-appinspect validation? 

Labels (1)
0 Karma

Splunk Employee
Splunk Employee

Hey @arthur - unfortunately this development pattern is not permitted in Splunk Cloud (and enforced by AppInspect).

0 Karma
Get Updates on the Splunk Community!

Splunk Lantern | Spotlight on Security: Adoption Motions, War Stories, and More

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Cloud | Empowering Splunk Administrators with Admin Config Service (ACS)

Greetings, Splunk Cloud Admins and Splunk enthusiasts! The Admin Configuration Service (ACS) team is excited ...

Tech Talk | One Log to Rule Them All

One log to rule them all: how you can centralize your troubleshooting with Splunk logs We know how important ...