Can we access Splunk using a subsite configuration?

[mfamd]

Hi,
How can we configure splunk to be accessibla within a subsite, by exampleȘ
https://something.com/subsite/....

We use Nginx fore proxyredirection to that /subsite/. However, Splunk alwayse try to load its resources from the root / directory.

Is there any way to indicate to splunk that all requests should come with an prefix as /subsite/....

Many thanks

[harsmarvania57]

Hi @mfamd,

You can configure web.conf to change root_endpoint

root_endpoint = <URI_prefix_string>
* Defines the root URI path on which the appserver will listen
* Default setting is '/'
* Ex: if you want to proxy the splunk UI at http://splunk:8000/splunkui,
  then set root_endpoint = /splunkui

So your web.conf configuration will be

[settings]
root_endpoint = /subsite

After that you need to restart splunkweb using $SPLUNK_HOME/bin/splunk restart splunkweb

I hope this helps.

Thanks,
Harshil