Security

How to host static content (simple txt file) containing IPs in the Splunk Web directory for users to access?

sdorsey15
New Member

Greetings all!

I am seeking to host a simple txt file containing IPs from the Splunk web dir. I have a Splunk search which yields IPs in a txt file and would like to then move that file to a place which is accessible via Splunk Web so other devices can access it. The file is going to be IPs deemed as "malicious" from the search, so I want firewalls to be able to reference the text file and update ACLs accordingly.

I referenced the below Answer and tried placing the txt file in /opt/splunk/etc/apps/app-here/static/. But I then could not access it by going to http://:8000/en-US/static/app/app-here/badip.txt
https://answers.splunk.com/answers/4290/create-a-custom-web-page-for-the-splunk-web-server-to-host.h...

Since that past answer is from 2011, has the location or URL changed? Or is there a better place to do this now?

0 Karma

niketn
Legend

If your Splunk App name is TestApp then following should be the path for static folder:

/opt/splunk/etc/apps/TestApp/appserver/static

Then you can access the contents through Splunk HTML panel elements, for eg:

<html src="/static/app/TestApp/html_tags.html">Test HTML Link</html>

Refer to HTML example on Splunk 6.x Dashboard Examples app for details on the same.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...