Security

Is it possible to disable http compression on SplunkWeb?

dask
Explorer

For splunkd on the indexer you can set a value in the server.conf file as such:

allowSslCompression = false

Is there an ability to do this for splunkweb?

There doesn't seem to be a setting to disable ssl Compression in web.conf

Tags (3)
0 Karma
1 Solution

alacercogitatus
SplunkTrust
SplunkTrust

server.conf is for a general splunk server. It should apply to both indexers and searchheads, imo.

You can run btool on the search head to determine what the current setting is: /opt/splunk/bin/splunk cmd btool --debug server list

EDIT:

You might like this: http://www.georgestarcher.com/?p=674. This might be relevant: http://answers.splunk.com/answers/65218/splunk-shows-vulnerable-to-cve-2012-4929-in-my-nessus-vulner...

View solution in original post

alacercogitatus
SplunkTrust
SplunkTrust

server.conf is for a general splunk server. It should apply to both indexers and searchheads, imo.

You can run btool on the search head to determine what the current setting is: /opt/splunk/bin/splunk cmd btool --debug server list

EDIT:

You might like this: http://www.georgestarcher.com/?p=674. This might be relevant: http://answers.splunk.com/answers/65218/splunk-shows-vulnerable-to-cve-2012-4929-in-my-nessus-vulner...

dask
Explorer

I see what you're saying, I guess I should have been more specific, our vulnerability scanner is picking up a finding on the Splunk Web Interface accessible via 443 that SSL/TLS compression is enabled - behind the scenes I know CherryPy is running - and from what I can tell you can't tell it to stop using SSL Compression.

0 Karma

dask
Explorer

Title should be SSL compression but the Captcha keeps failing for some reason

0 Karma
Get Updates on the Splunk Community!

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...

Index This | What goes away as soon as you talk about it?

May 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this month’s ...