Security

Can we access Splunk using a subsite configuration?

mfamd
New Member

Hi,
How can we configure splunk to be accessibla within a subsite, by exampleȘ
https://something.com/subsite/....

We use Nginx fore proxyredirection to that /subsite/. However, Splunk alwayse try to load its resources from the root / directory.

Is there any way to indicate to splunk that all requests should come with an prefix as /subsite/....

Many thanks

0 Karma

harsmarvania57
Ultra Champion

Hi @mfamd,

You can configure web.conf to change root_endpoint

root_endpoint = <URI_prefix_string>
* Defines the root URI path on which the appserver will listen
* Default setting is '/'
* Ex: if you want to proxy the splunk UI at http://splunk:8000/splunkui,
  then set root_endpoint = /splunkui

So your web.conf configuration will be

[settings]
root_endpoint = /subsite

After that you need to restart splunkweb using $SPLUNK_HOME/bin/splunk restart splunkweb

I hope this helps.

Thanks,
Harshil

Get Updates on the Splunk Community!

Why You Can't Miss .conf25: Unleashing the Power of Agentic AI with Splunk & Cisco

The Defining Technology Movement of Our Lifetime The advent of agentic AI is arguably the defining technology ...

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...