Greetings all!
I am seeking to host a simple txt file containing IPs from the Splunk web dir. I have a Splunk search which yields IPs in a txt file and would like to then move that file to a place which is accessible via Splunk Web so other devices can access it. The file is going to be IPs deemed as "malicious" from the search, so I want firewalls to be able to reference the text file and update ACLs accordingly.
I referenced the below Answer and tried placing the txt file in /opt/splunk/etc/apps/app-here/static/. But I then could not access it by going to http://:8000/en-US/static/app/app-here/badip.txt
https://answers.splunk.com/answers/4290/create-a-custom-web-page-for-the-splunk-web-server-to-host.h...
Since that past answer is from 2011, has the location or URL changed? Or is there a better place to do this now?
If your Splunk App name is TestApp then following should be the path for static folder:
/opt/splunk/etc/apps/TestApp/appserver/static
Then you can access the contents through Splunk HTML panel elements, for eg:
<html src="/static/app/TestApp/html_tags.html">Test HTML Link</html>
Refer to HTML example on Splunk 6.x Dashboard Examples app for details on the same.