Turn on HTTPS encryption for Splunk Web using the web.conf configuration file

You can enable HTTPS communication between your browser and Splunk Web by using the web.conf configuration file.

The form of encryption that this procedure describes does not meet standards for security if you use the default certificates that come with the product. To ensure communications are completely secure, you must exchange the default certificates for your own and configure secure authentication. See Configure Splunk Web to use TLS certificates for information about replacing the default certificates.

If the web.conf file is not already present in your Splunk Enterprise configuration directory in $SPLUNK_HOME/etc/system/local, you can create the file there, or in a custom application directory in the $SPLUNK_HOME/etc/apps/ file. For information on configuration files in general, see About configuration files.

1. Open the web.conf configuration file for editing.
2. In the file, within the [settings] stanza, configure the enableSplunkWebSSL setting to true:

   [settings]
   httpport = <https port number>
   enableSplunkWebSSL = true
   

   Unless you configure Splunk Enterprise to use your own certificates, it uses the default certificates when you turn on encryption.

3. Restart Splunk Enterprise. See Restart Splunk in the Admin Manual for instructions.
4. After Splunk Enterprise restarts, to access Splunk Web on that instance, use "https://<your site name>:<port>" for the URL.