Use Splunk Web with a reverse proxy configuration
Splunk web can be placed behind a proxy in a reverse proxy type of configuration. If you are hosting Splunk Web behind a proxy that does not place Splunk Web at the proxy's root, you may need to configure the root_endpoint
setting in $SPLUNK_HOME/etc/system/local/web.conf
.
For example if your proxy hosts Splunk Web at "yourhost.com:9000/splunk", root_endpoint
should be set to /splunk
.
Note: The App Manager is not supported for use with a proxy server, if you use a proxy server with Splunk Web, you must download and update apps manually.
Typical Reverse Proxy Configuration
Lets take an example where Splunk Web is accessed via http://splunk.example.com:8000/lzone
instead of http://splunk.example.com:8000/
.
For enable this behavior, please set the following in web.conf
root_endpoint=/lzone
For a Apache proxy server, you would then make it visible to the proxy by mapping it in httpd.conf
. Please check the documentation for additional information.
# Maps remote servers into the local server URL-space ProxyPass /lzone http://splunkweb.splunk.com:8000/lzone #Adjusts the URL in HTTP response headers sent from a reverse proxied server ProxyPassReverse /lzone http://splunkweb.splunk.com:8000/lzone
Best practices when configuring an HTTP Proxy Server for splunkd | About the Splunk Enterprise AMI |
This documentation applies to the following versions of Splunk® Enterprise: 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9, 7.0.10, 7.0.11, 7.0.13, 7.1.0, 7.1.1, 7.1.2, 7.1.3, 7.1.4, 7.1.5, 7.1.6, 7.1.7, 7.1.8, 7.1.9, 7.1.10, 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.2.8, 7.2.9, 7.2.10, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, 7.3.5, 7.3.6, 7.3.7, 7.3.8, 7.3.9, 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8, 8.0.9, 8.0.10, 8.1.0, 8.1.1, 8.1.2, 8.1.3, 8.1.4, 8.1.5, 8.1.6, 8.1.7, 8.1.8, 8.1.9, 8.1.10, 8.1.11, 8.1.12, 8.1.13, 8.1.14, 8.2.0, 8.2.1, 8.2.2, 8.2.3, 8.2.4, 8.2.5, 8.2.6, 8.2.7, 8.2.8, 8.2.9, 8.2.10, 8.2.11, 8.2.12, 9.0.0, 9.0.1, 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9, 9.0.10, 9.1.0, 9.1.1, 9.1.2, 9.1.3, 9.1.4, 9.1.5, 9.1.6, 9.2.0, 9.2.1, 9.2.2, 9.2.3, 9.3.0, 9.3.1
Feedback submitted, thanks!