Security

How to hide login information from URL?

subitha_kennedy
Loves-to-Learn Everything

I created a landing page for all applications.. but the login information is visible in url.. how can i change that xml..

I don't want to see the login information in url. Attached the code I am using .

<panel>
<input type="dropdown" token="user_name" searchWhenChanged="true">
<label>User Name</label>
<selectFirstChoice>true</selectFirstChoice>
<search>
<query>
| rest /services/authentication/current-context splunk_server=local | fields username | eval username=mvindex(split(username,"@"),0)
</query>
</search>
<fieldForLabel>username</fieldForLabel>
<fieldForValue>username</fieldForValue>
</input>

 

 

 

<div class="dropdown-content">
<a>$form.user_name$</a>
<a href="*" target="_blank">My Profile</a>
</div>

 

 

Any reply would be highly helpful..

 

 

Thanks,

Splunk lover

Labels (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @subitha_kennedy,

let me understand: you created a dashboard panel that displays the usernames of your user and you want to hide usernames, whay you did it?

Ciao.

Giuseppe

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

The values of the tokens are passed in the URL - the only way to not have them present in the URL is to not have them in the first place (or by obfuscating the values and somehow unobfuscating when you need to use the original value).

0 Karma
Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...