Splunk Enterprise

How to Integrate a read-only version of Splunk app's dashboards into L Squared Hub via an iframe?

ashishLSN
Explorer
Hello Splunk Team,

who we are?
L Squared is a leading digital signage service provider, offering the Hub Content Management System (CMS). This platform empowers users to effortlessly manage and display media content on digital signage screens. we want integrate Splunk powerful data analytics platform, into our ecosystem.
 
What we want?
  • Integrating a read-only version of Splunk app's dashboards into L Squared Hub via an iframe.
  • Implementing OAuth 2.0 authentication for secure access token generation or any other authentication method to get access token securely.
  • Providing users with a list of Splunk apps and their respective dashboards for selection.

How to do?

To achieve these objectives, users will follow these steps:
  1. Initiate an OAuth 2.0 authentication request to Splunk for access token generation or utilize client credentials such as username, password, and secret key.

  2. Upon successful authorization, users gain access to Splunk REST API endpoints, including:
    1. Retrieving a list of installed Splunk apps using the following API call:
      E.g. "curl -k -u admin:password https://localhost:8089/services/apps/local?output_mode=json"

    2. Fetching a list of dashboards for a specific Splunk app via the following API call:
      e.g. curl -k -u admin:password https://localhost:8089/servicesNS/{username}/{app_name}/data/ui/views?output_mode=json&search=((isDa...


  3. Finally, embed the selected Splunk app's dashboard read-only version onto L Squared Hub using an iframe.

Who are our end users?
This integration empowers organizations to seamlessly monitor and analyze their data through large displays. It enables teams to access up-to-date Splunk data conveniently, enhancing decision-making and operational efficiency.

if you know right person or right way to get solution, please share with us ideas.

Thanks in advance!

@MuS @elizabethl_splu @richgalloway 
0 Karma

MuS
Legend

Hi there,

This will not work.

TL;DR: there is no oAuth2 in Splunk REST API.

 

If you want to use my EDFS https://apps.splunk.com/app/4377/ this is based on RBAC and IP access permissions.

Hope this helps ...

MuS

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...