Deployment Architecture

web-features.conf in Clustered Environment

makelovenotwar
Path Finder

I would like to allow list a url from my dashboards so that no more redirection warnings pop up.  Per the documentation, I can do this by editing web-features.conf on my SHs.

What would be the proper way to push this as a bundle? I tried creating and modifying web-features.conf  in an app context on the SHC Deployer (../shcluster/apps/myapp/default/web-features.conf) directory but I still got the pop up (yes, I restarted the SHs). After using "apply shcluster-bundle",  I used btool AND show config to verify the config changes appeared on the SHs. No dice.

If I modify web-features.conf directly on the SHs (../etc/system/local/web-features.conf), it works perfectly.

Thank you!

my edited web-features.conf below:

[feature:dashboards_csp]
dashboards_trusted_domain.domain1 = *myurl.com

 

Labels (2)
0 Karma
1 Solution

twollenslegel_s
Splunk Employee
Splunk Employee

Per the docs, it must be in sytem/local
https://docs.splunk.com/Documentation/Splunk/latest/Admin/Web-featuresconf

# To use one or more of these configurations, copy the configuration block into
# the web-features.conf file located in $SPLUNK_HOME/etc/system/local/. You must restart
# Splunk software after you make changes to this setting to enable configurations.

BTW, Btool isn't always the best way to check settings as it just reads the OS files and parses the data there, the configuration files seen by btool may or may not be valid.

 

View solution in original post

makelovenotwar
Path Finder

Fair enough. I wish there was a Splunk way to push these changes to system/local that didn't include a third party application.

 

Would you recommend show config vs btool in this case?

0 Karma

twollenslegel_s
Splunk Employee
Splunk Employee

I reached out to the development team and let them know your concerns, I have the same issue with an app I am developing as well. Not sure there will be any changes, but at least they know about it. 

twollenslegel_s
Splunk Employee
Splunk Employee

Per the docs, it must be in sytem/local
https://docs.splunk.com/Documentation/Splunk/latest/Admin/Web-featuresconf

# To use one or more of these configurations, copy the configuration block into
# the web-features.conf file located in $SPLUNK_HOME/etc/system/local/. You must restart
# Splunk software after you make changes to this setting to enable configurations.

BTW, Btool isn't always the best way to check settings as it just reads the OS files and parses the data there, the configuration files seen by btool may or may not be valid.

 

Get Updates on the Splunk Community!

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...

Adoption of Infrastructure Monitoring at Splunk

  Splunk's Growth Engineering team showcases one of their first Splunk product adoption-Splunk Infrastructure ...