Security

How to hide login information from URL?

subitha_kennedy
Loves-to-Learn Everything

I created a landing page for all applications.. but the login information is visible in url.. how can i change that xml..

I don't want to see the login information in url. Attached the code I am using .

<panel>
<input type="dropdown" token="user_name" searchWhenChanged="true">
<label>User Name</label>
<selectFirstChoice>true</selectFirstChoice>
<search>
<query>
| rest /services/authentication/current-context splunk_server=local | fields username | eval username=mvindex(split(username,"@"),0)
</query>
</search>
<fieldForLabel>username</fieldForLabel>
<fieldForValue>username</fieldForValue>
</input>

 

 

 

<div class="dropdown-content">
<a>$form.user_name$</a>
<a href="*" target="_blank">My Profile</a>
</div>

 

 

Any reply would be highly helpful..

 

 

Thanks,

Splunk lover

Labels (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @subitha_kennedy,

let me understand: you created a dashboard panel that displays the usernames of your user and you want to hide usernames, whay you did it?

Ciao.

Giuseppe

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

The values of the tokens are passed in the URL - the only way to not have them present in the URL is to not have them in the first place (or by obfuscating the values and somehow unobfuscating when you need to use the original value).

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...