Knowledge Management

Splunk 'Agree to terms' function

karlbosanquet
Path Finder

Is there a function where a custom 'terms of use' can be displayed each time a user logs in, with the option to continue or log out?

0 Karma

woodcock
Esteemed Legend

You can try the Welcome Page Creator:
https://splunkbase.splunk.com/app/2991/

0 Karma

adonio
Ultra Champion

there are couple ways to change and custom the login page.
here is a link to an answer on this subject: https://answers.splunk.com/answers/504574/how-to-add-the-search-head-name-or-vm-name-to-logi.html
hope it helps

0 Karma

jstoner_splunk
Splunk Employee
Splunk Employee

Take a look at this example and see if this fits the bill: https://answers.splunk.com/answers/333645/how-to-create-a-custom-message-on-the-login-page-f.html

Essentially, you will modify the web.conf file and set the login_content key

http://docs.splunk.com/Documentation/Splunk/latest/Admin/Webconf?utm_source=answers&utm_medium=in-an...
login_content =
* Add custom content to the login page
* Supports any text including html

karlbosanquet
Path Finder

I can use that to publish links to usage documents and internal reference material, however I still need to find a function where a user has to accept a statement either before or after they log in.

I have searched through web.conf and splunkbase and not yet found anything available.

0 Karma

jstoner_splunk
Splunk Employee
Splunk Employee

Could you write your warning banner to say something like this?

login_content = You are about to access a computer network that is intended for authorized users only. You should have no expectation of privacy in your use of this network. Use of this system constitutes consent to monitoring, retrieval, and disclosure of any information stored within the network for any purpose including criminal prosecution. If you do not consent to monitoring, then please leave now.

Basically by logging on you are saying you consent to monitor and thus eliminate the need to add buttons.

Would that work?

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...