Are you a member of the Splunk Community?
- Find Answers
- :
- Using Splunk
- :
- Splunk Search
- :
- Re: In the top 10 values of the "http_referrer" fi...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I'm in the process of analyzing events in some of our download logs. When I click on "http_referrer" it brings up the top 10 values for this field, however the very first value is blank. This first value is significantly higher than the others, so I'm interested in where this traffic is coming from. What does a blank http_referrer field mean?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
According to this page over at stack overflow, http_referrer is an unreliable field. Blank means it wasn't filled in. in some cases, that means the browser was in a private window or otherwise had privacy enabled, in others it might indicate that the referring page just didn't care enough to code it.
http://stackoverflow.com/questions/6023941/how-reliable-is-http-referer
According to THIS page - https://gispunt.wordpress.com/2012/01/10/why-using-referer-header-as-a-security-mechanism-is-a-bad-i...
"Most modern browsers have a “enhanced
privacy mode” that will remove the
referrer header next to refusing all
sorts of other tracking mechanisms,
which the header was initially
designed for."
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
According to this page over at stack overflow, http_referrer is an unreliable field. Blank means it wasn't filled in. in some cases, that means the browser was in a private window or otherwise had privacy enabled, in others it might indicate that the referring page just didn't care enough to code it.
http://stackoverflow.com/questions/6023941/how-reliable-is-http-referer
According to THIS page - https://gispunt.wordpress.com/2012/01/10/why-using-referer-header-as-a-security-mechanism-is-a-bad-i...
"Most modern browsers have a “enhanced
privacy mode” that will remove the
referrer header next to refusing all
sorts of other tracking mechanisms,
which the header was initially
designed for."
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Very useful information - thanks so much!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
you're welcome!
Shape the Future of Splunk: Join the Product Research Lab!
Auto-Injector for Everything Else: Making OpenTelemetry Truly Universal
[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions
