Deployment Architecture

web-features.conf in Clustered Environment

makelovenotwar
Path Finder

I would like to allow list a url from my dashboards so that no more redirection warnings pop up.  Per the documentation, I can do this by editing web-features.conf on my SHs.

What would be the proper way to push this as a bundle? I tried creating and modifying web-features.conf  in an app context on the SHC Deployer (../shcluster/apps/myapp/default/web-features.conf) directory but I still got the pop up (yes, I restarted the SHs). After using "apply shcluster-bundle",  I used btool AND show config to verify the config changes appeared on the SHs. No dice.

If I modify web-features.conf directly on the SHs (../etc/system/local/web-features.conf), it works perfectly.

Thank you!

my edited web-features.conf below:

[feature:dashboards_csp]
dashboards_trusted_domain.domain1 = *myurl.com

 

Labels (2)
0 Karma
1 Solution

twollenslegel_s
Splunk Employee
Splunk Employee

Per the docs, it must be in sytem/local
https://docs.splunk.com/Documentation/Splunk/latest/Admin/Web-featuresconf

# To use one or more of these configurations, copy the configuration block into
# the web-features.conf file located in $SPLUNK_HOME/etc/system/local/. You must restart
# Splunk software after you make changes to this setting to enable configurations.

BTW, Btool isn't always the best way to check settings as it just reads the OS files and parses the data there, the configuration files seen by btool may or may not be valid.

 

View solution in original post

makelovenotwar
Path Finder

Fair enough. I wish there was a Splunk way to push these changes to system/local that didn't include a third party application.

 

Would you recommend show config vs btool in this case?

0 Karma

twollenslegel_s
Splunk Employee
Splunk Employee

I reached out to the development team and let them know your concerns, I have the same issue with an app I am developing as well. Not sure there will be any changes, but at least they know about it. 

twollenslegel_s
Splunk Employee
Splunk Employee

Per the docs, it must be in sytem/local
https://docs.splunk.com/Documentation/Splunk/latest/Admin/Web-featuresconf

# To use one or more of these configurations, copy the configuration block into
# the web-features.conf file located in $SPLUNK_HOME/etc/system/local/. You must restart
# Splunk software after you make changes to this setting to enable configurations.

BTW, Btool isn't always the best way to check settings as it just reads the OS files and parses the data there, the configuration files seen by btool may or may not be valid.

 

Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...