Re: Display website in iFrame with URL coming from...

viggor · ‎08-14-2017

I have a dashboard which contains a variable $url$
and I would like to display the website who's address is stored in $url$ inside an iFrame.

I am failing to do something like:

<html>
  <iframe src="$url$" height="200" width="1000" style="border:none;"/>
 </html>

Any ideas?

woodcock · ‎05-22-2020

The problem that you are having is that recently Splunk has added some settings to control this type of content and defaulted dashboard_html_allow_embeddable_content to false. In order to get it to work, try enabling these settings in web.conf:

dashboard_html_allow_inline_styles = <boolean>
* Whether or not to allow style attributes from inline HTML elements in dashboards.
* If "false", style attributes from inline HTML elements in dashboards will be removed 
  to prevent potential attacks.
* Default: true

dashboard_html_allow_embeddable_content = <boolean>
* Whether or not to allow <embed> and <iframe> HTML elements in dashboards.
* If set to "true", <embed> and <iframe> HTML elements in dashboards will not be removed 
  and can lead to a potential security risk.
* If set to the default value of "false", <embed> and <iframe> HTML elements will be stripped
  from the dashboard HTML.
* Default: false

dashboard_html_wrap_embed = <boolean>
* Whether or not to wrap <embed> HTML elements in dashboards with an <iframe>.
* If set to "false", <embed> HTML elements in dashboards will not be wrapped, leading to
  a potential security risk.
* If set to "true", <embed> HTML elements will be wrapped by an <iframe sandbox> element to help
  mitigate potential security risks.
* Default: true

dashboard_html_allow_iframes = <boolean>
* Whether or not to allow iframes from HTML elements in dashboards.
* If "false", iframes from HTML elements in dashboards will be removed to prevent
  potential attacks.
* Default: true

niketn · ‎08-16-2017

Yes it should. If it is not working press F12 and test Console for any page level errors with iFrame options like I had mentioned in my previous comment.

Following is an extension of above example with a single value panel displaying URL and clicking on the same iFrame should be opened.

  <row>
    <panel>
      <single>
        <search>
          <query>| makeresults
| eval URL="http://docs.splunk.com/Documentation"
| table URL
          </query>
        </search>
        <option name="colorMode">block</option>
        <option name="drilldown">all</option>
        <option name="useColors">1</option>
        <drilldown>
          <set token="tokURL">$click.value$</set>
        </drilldown>
      </single>
    </panel>
  </row>
  <row>
    <panel depends="$tokURL$">
      <html>
        <iframe src="$tokURL$" height="600" width="100%" style="border:2;">
          <p>Your browser does not support iframes.</p>
        </iframe>
      </html>
    </panel>
  </row>

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

niketn · ‎08-29-2017

@viggor, were you able to try out the example? Please let us know if something is not working for you.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

noy72 · ‎02-22-2019

I know this is old, but I am trying to make this work. My URL opens up a webpage that verifies the status of ditribution points.
http://sccm/sms_mp/.ss_aut?mplist

When Ireplace my URL with the URL in the example, the dashboard diplays a large black bar with my UL in white text and an empty, bordered panel.
Any assistance would be apreciated.
Ron Jones

niketn · ‎08-14-2017

What are some of the URL values? Can you put some samples?
If they are external URLs, then you should test opening them in regular HTML files first as some websites do not allow their pages to be opened inside iFrames using following x-frame-options: x-frame-options' to 'sameorigin'. Refer to the following link: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options

Following is run anywhere search to open http://docs.splunk.com which supports opening in iFrames but does not work with https://answers.splunk.com which does not. You can open your HTML debugger(F12) to investigate this issue as there should be a Console error logged for the same if iFrame is not loading.

  <row>
    <panel>
      <html>
        <iframe src="http://docs.splunk.com/Documentation" height="600" width="100%" style="border:2;">
          <p>Your browser does not support iframes.</p>
        </iframe>
      </html>
    </panel>
  </row>

PS: I changed border to 2 just to ensure that iFrame is supported and showing up in Splunk whether the webpage opens inside iFrame or not.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

viggor · ‎08-15-2017

Thanks for your answer. What you posted works perfectly fine for static, constant urls, but what if the url is stored in a variable $url$?

Display website in iFrame with URL coming from variable?

other

Enterprise Security Content Update (ESCU) | New Releases

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

Index This | What are the 12 Days of Splunk-mas?