Security

Content Encoding Error when running Splunk from behind a reverse-proxy

zyamada
New Member

Hi all,

I am encountering an error, "Content Encoding Error, The page you are trying to view cannot be shown because it uses an invalid or unsupported form of compression." when I attempt to access Splunk from behind a reverse-proxy running through apache. Splunk works fine when being access directly and not through the proxy.

Anyone know what may be causing this?

My /opt/splunk/etc/system/local/web.conf is as follows:

  [settings]
  enableSplunkWebSSL = 0
  tools.proxy.on = True

While my proxy configuration is....

  ProxyRequests Off
  ProxyPreserveHost On
  ProxyHTMLEnable On

  ProxyPass /splunk/ http://localhost:8000/
  ProxyPassReverse /splunk/ http://127.0.0.1:8000/
  ProxyPass /en-US http://127.0.0.1:8000/en-US
  ProxyPassReverse /en-US http://127.0.0.1:8000/en-US
  ProxyPass /static http://127.0.0.1:8000/static
  ProxyPassReverse /static http://127.0.0.1:8000/static
  ProxyPass /manager http://127.0.0.1:8000/manager
  ProxyPassReverse /manager http://127.0.0.1:8000/manager

I tried googling about and have yet to find anyone else who has experienced this issue before so I am hoping someone here may have an idea!

Thanks for all the help!

0 Karma
1 Solution

ziegfried
Influencer

Since all URI's in Splunkweb are typlically prefix by the locale, you should be able to create to reverse proxy settings just using the /en-US part (without using the HTML rewite stuff)

ProxyPreserveHost On
ProxyPass /en-US http://127.0.0.1:8000/en-US
ProxyPassReverse /en-US http://127.0.0.1:8000/en-US

In addition you could create a redirect rule to forward requests to /splunk to the /en-US

View solution in original post

0 Karma

ziegfried
Influencer

Since all URI's in Splunkweb are typlically prefix by the locale, you should be able to create to reverse proxy settings just using the /en-US part (without using the HTML rewite stuff)

ProxyPreserveHost On
ProxyPass /en-US http://127.0.0.1:8000/en-US
ProxyPassReverse /en-US http://127.0.0.1:8000/en-US

In addition you could create a redirect rule to forward requests to /splunk to the /en-US

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...