Security

How to hide login information from URL?

subitha_kennedy
Loves-to-Learn Everything

I created a landing page for all applications.. but the login information is visible in url.. how can i change that xml..

I don't want to see the login information in url. Attached the code I am using .

<panel>
<input type="dropdown" token="user_name" searchWhenChanged="true">
<label>User Name</label>
<selectFirstChoice>true</selectFirstChoice>
<search>
<query>
| rest /services/authentication/current-context splunk_server=local | fields username | eval username=mvindex(split(username,"@"),0)
</query>
</search>
<fieldForLabel>username</fieldForLabel>
<fieldForValue>username</fieldForValue>
</input>

 

 

 

<div class="dropdown-content">
<a>$form.user_name$</a>
<a href="*" target="_blank">My Profile</a>
</div>

 

 

Any reply would be highly helpful..

 

 

Thanks,

Splunk lover

Labels (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @subitha_kennedy,

let me understand: you created a dashboard panel that displays the usernames of your user and you want to hide usernames, whay you did it?

Ciao.

Giuseppe

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

The values of the tokens are passed in the URL - the only way to not have them present in the URL is to not have them in the first place (or by obfuscating the values and somehow unobfuscating when you need to use the original value).

0 Karma
Get Updates on the Splunk Community!

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

March Community Office Hours Security Series Uncovered!

Hello Splunk Community! In March, Splunk Community Office Hours spotlighted our fabulous Splunk Threat ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars in April. This post ...