Security

Content Encoding Error when running Splunk from behind a reverse-proxy

zyamada
New Member

Hi all,

I am encountering an error, "Content Encoding Error, The page you are trying to view cannot be shown because it uses an invalid or unsupported form of compression." when I attempt to access Splunk from behind a reverse-proxy running through apache. Splunk works fine when being access directly and not through the proxy.

Anyone know what may be causing this?

My /opt/splunk/etc/system/local/web.conf is as follows:

  [settings]
  enableSplunkWebSSL = 0
  tools.proxy.on = True

While my proxy configuration is....

  ProxyRequests Off
  ProxyPreserveHost On
  ProxyHTMLEnable On

  ProxyPass /splunk/ http://localhost:8000/
  ProxyPassReverse /splunk/ http://127.0.0.1:8000/
  ProxyPass /en-US http://127.0.0.1:8000/en-US
  ProxyPassReverse /en-US http://127.0.0.1:8000/en-US
  ProxyPass /static http://127.0.0.1:8000/static
  ProxyPassReverse /static http://127.0.0.1:8000/static
  ProxyPass /manager http://127.0.0.1:8000/manager
  ProxyPassReverse /manager http://127.0.0.1:8000/manager

I tried googling about and have yet to find anyone else who has experienced this issue before so I am hoping someone here may have an idea!

Thanks for all the help!

0 Karma
1 Solution

ziegfried
Influencer

Since all URI's in Splunkweb are typlically prefix by the locale, you should be able to create to reverse proxy settings just using the /en-US part (without using the HTML rewite stuff)

ProxyPreserveHost On
ProxyPass /en-US http://127.0.0.1:8000/en-US
ProxyPassReverse /en-US http://127.0.0.1:8000/en-US

In addition you could create a redirect rule to forward requests to /splunk to the /en-US

View solution in original post

0 Karma

ziegfried
Influencer

Since all URI's in Splunkweb are typlically prefix by the locale, you should be able to create to reverse proxy settings just using the /en-US part (without using the HTML rewite stuff)

ProxyPreserveHost On
ProxyPass /en-US http://127.0.0.1:8000/en-US
ProxyPassReverse /en-US http://127.0.0.1:8000/en-US

In addition you could create a redirect rule to forward requests to /splunk to the /en-US

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...