Knowledge Management

Splunk 'Agree to terms' function

karlbosanquet
Path Finder

Is there a function where a custom 'terms of use' can be displayed each time a user logs in, with the option to continue or log out?

0 Karma

woodcock
Esteemed Legend

You can try the Welcome Page Creator:
https://splunkbase.splunk.com/app/2991/

0 Karma

adonio
Ultra Champion

there are couple ways to change and custom the login page.
here is a link to an answer on this subject: https://answers.splunk.com/answers/504574/how-to-add-the-search-head-name-or-vm-name-to-logi.html
hope it helps

0 Karma

jstoner_splunk
Splunk Employee
Splunk Employee

Take a look at this example and see if this fits the bill: https://answers.splunk.com/answers/333645/how-to-create-a-custom-message-on-the-login-page-f.html

Essentially, you will modify the web.conf file and set the login_content key

http://docs.splunk.com/Documentation/Splunk/latest/Admin/Webconf?utm_source=answers&utm_medium=in-an...
login_content =
* Add custom content to the login page
* Supports any text including html

karlbosanquet
Path Finder

I can use that to publish links to usage documents and internal reference material, however I still need to find a function where a user has to accept a statement either before or after they log in.

I have searched through web.conf and splunkbase and not yet found anything available.

0 Karma

jstoner_splunk
Splunk Employee
Splunk Employee

Could you write your warning banner to say something like this?

login_content = You are about to access a computer network that is intended for authorized users only. You should have no expectation of privacy in your use of this network. Use of this system constitutes consent to monitoring, retrieval, and disclosure of any information stored within the network for any purpose including criminal prosecution. If you do not consent to monitoring, then please leave now.

Basically by logging on you are saying you consent to monitor and thus eliminate the need to add buttons.

Would that work?

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...