vulnerabilities issue

syedabuthahir · ‎08-26-2021

We are getting some vulnerabilities for our splunk instance and to fix that we need to Add strict-transport-security header to the http responses.
We have tried adding stanza "sendStrictTransportSecurityHeader = true" to the server.conf and web.conf but the issue still persist,

Can anyone please help me on this issue

codebuilder · ‎08-26-2021

Did you set enableSplunkWebSSL ? Also, adding/changing either value requires a Splunk restart.

----
An upvote would be appreciated and Accept Solution if it helps!

vulnerabilities issue

using Splunk Enterprise

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Vibe-coding, AI, and Splunkcraft: Highlights from the .conf26 Builder Bar

Thanks for the Memories: .conf26 Took Learning to New Heights

Best Practices: Splunk auto adjust pipeline queue

Join the Conversation

vulnerabilities issue

using Splunk Enterprise

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Vibe-coding, AI, and Splunkcraft: Highlights from the .conf26 Builder Bar

Thanks for the Memories: .conf26 Took Learning to New Heights

Best Practices: Splunk auto adjust pipeline queue