Currently users can reach our searchead by using both
I want to use URL rewrite so that all requests that do not contain .domain.com adds the .domain.com. This because when we share search results with our hosting partner they need to have the domain added or else their browser will use their own internal domain. It is not a big issue, but sometimes it causes delays in whatever we do when they reply "Splunk is down" or "link does not work".
And if above is possible, is it also possible to rewrite ...domain.com/en-US/ to ...domain.com/en-GB/? I have made instructions for our end users how to change it in their browser, but some have not causing confusion due to "wrong" date format.
You can define rewrite rules if you have an Apache reverse proxy chained in front of your search head(s), just use mod_rewrite
as you normally would. I don't think the CherryPy included with Splunk supports rewrite rules on its own.
Note, this will not fix your domain issue retroactively. If the domain doesn't exist from outside your inner network then they won't even reach the Apache, so the rewrite rules won't work. However, by forcing inner-network users onto the FQDN you will get "clean" links sent out in the future.
Hi Rune,
In case you don't want to set up a reverse proxy, I suspect this should have been possible using the following in your local/web.conf file:
[settings]
embed_uri = http://searchhead.domain.com
Summary:
I expected that embed_uri would work for both ways of "sharing" searches. I've filed a bug report to see if this was also the developer's intention
use of a load balancer will be very easy solution. but i dont think any user outside the domain reach the link for which you want to re-write the rule.
You can define rewrite rules if you have an Apache reverse proxy chained in front of your search head(s), just use mod_rewrite
as you normally would. I don't think the CherryPy included with Splunk supports rewrite rules on its own.
Note, this will not fix your domain issue retroactively. If the domain doesn't exist from outside your inner network then they won't even reach the Apache, so the rewrite rules won't work. However, by forcing inner-network users onto the FQDN you will get "clean" links sent out in the future.