vulnerabilities issue

syedabuthahir · ‎08-26-2021

We are getting some vulnerabilities for our splunk instance and to fix that we need to Add strict-transport-security header to the http responses.
We have tried adding stanza "sendStrictTransportSecurityHeader = true" to the server.conf and web.conf but the issue still persist,

Can anyone please help me on this issue

codebuilder · ‎08-26-2021

Did you set enableSplunkWebSSL ? Also, adding/changing either value requires a Splunk restart.

----
An upvote would be appreciated and Accept Solution if it helps!

vulnerabilities issue

using Splunk Enterprise

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Build resilience for the agentic era: Join us at Splunk Go San Jose

Manage Edge Processor pipelines end to end with APIs

Join the Conversation

vulnerabilities issue

using Splunk Enterprise

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Build resilience for the agentic era: Join us at Splunk Go San Jose

Manage Edge Processor pipelines end to end with APIs