Best thing you can do there is SHA256-crypt-1000000 . This makes it almost impossible to guess passwords unless you have "Welcome-2016". In our case we did not have the slow downs mentioned in the doc. ... View more

You could take an axe to $SPLUNK_HOME/Python-2.7/Lib/site-packages/splunk/appserver/mrsparkle/controllers/top.py and for example add a redirect to its modules page at around L150: @expose_page(must_login=True) def modules(self, **kwargs): self.redirect_to_url('/') # added return # added """ Generates an HTML page documenting all registered modules """ ... That's not a very pretty approach, and obviously not update-safe... but should do the job. Remember to restart splunkweb after making changes. ... View more