After upgrading Splunk from 6.0.x to 6.5.0, why are we unable to load dashboards embedded in an iframe?

[runner724]

Hello all,

After upgrading Splunk from 6.0.x to 6.5.0, we are unable to load Splunk dashboards that are presented to the users in an iframe.

"Refused to display '(the url)' in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'."

1) I added the following to C:\Program Files\Splunk\etc\system\local\server.conf:

[httpServer]
x_frame_options_sameorigin = false

2) I also added the following to C:\Program Files\Splunk\etc\system\local\web.conf:

[settings]
x_frame_options_sameorigin = false

After making the two changes above and restarting the splunkd Service, I get the same error above.

According to my research, the settings in system\local should take highest precedence so I'm at a loss as to why neither change has effect.

[mattymo]

did you create the embed links back in 6.0.x?

Out of curiosity have you tried removing and re-creating the embed to see if it changes anything?

Also have you tried multiple browsers?

[runner724]

Good questions-

I created a brand-new dashboard (under Splunk 6.5.0) and added it to an iframe. It refused to display when browsed to using IE11 and Chrome 53 on multiple computers.

The web page source is simple:

The dashboard loads perfectly fine outside of an iframe.

[frobinson_splun]

Hi @runner724,
This previous post might be helpful:
https://answers.splunk.com/answers/213337/is-it-possible-to-display-an-external-web-page-in.html

[marcoscala]

I downvoted this post because not pertinent with the issue

[runner724]

That's a great post, but the opposite of my issue.

I am not putting iframes in the Splunk dashboard - an iframe is hosting the splunk dashboard, and the dashboard refuses to render in the iframe because of the x-frame-options.

I edited my post to hopefully make that clearer.