You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
177 lines
7.8 KiB
177 lines
7.8 KiB
# Version 9.2.2.20240415
|
|
#
|
|
############################################################################
|
|
# OVERVIEW
|
|
############################################################################
|
|
# This file contains descriptions of Splunk Web features used to configure
|
|
# Splunk Enterprise. You can use the settings to configure Splunk Web features.
|
|
# These features are replicated in a search head cluster environment.
|
|
#
|
|
# Each stanza controls a different web feature.
|
|
#
|
|
# For more information on configuration files, including precedence, search for
|
|
# "Use Splunk Web to manage configuration files" in the Admin Manual in the Splunk Docs.
|
|
|
|
[feature:quarantine_files]
|
|
|
|
# Determines whether or not Splunk Web can use jQuery 2 JavaScript files.
|
|
enable_jQuery2 = false
|
|
|
|
# Determines whether or not Splunk Web can use unsupported JavaScript files that
|
|
# the Splunk platform will delete in a future release.
|
|
enable_unsupported_hotlinked_imports = false
|
|
|
|
[feature:dashboards_csp]
|
|
|
|
# Toggle whether to restrict external content on Splunk Dashboard load.
|
|
enable_dashboards_external_content_restriction = true
|
|
|
|
# Toggle whether to restrict redirect to external url in Splunk Dashboards.
|
|
enable_dashboards_redirection_restriction = true
|
|
|
|
# List of internal domains trusted by Splunk Platform. When checking for URL
|
|
# trustworthiness, these domains will be combined with the Dashboards Trusted
|
|
# Domains List.
|
|
# Do not modify this list.
|
|
internal.dashboards_trusted_domain.splunkdocs = docs.splunk.com
|
|
internal.dashboards_trusted_domain.victoropshelp = help.victorops.com
|
|
internal.dashboards_trusted_domain.flowmilldocs = docs.flowmill.com
|
|
internal.dashboards_trusted_domain.rigorhelp = help.rigor.com
|
|
internal.dashboards_trusted_domain.splunkbasesplunk = splunkbase.splunk.com
|
|
internal.dashboards_trusted_domain.splunkbase = splunkbase.com
|
|
internal.dashboards_trusted_domain.splunkapps = apps.splunk.com
|
|
internal.dashboards_trusted_domain.splunklantern = lantern.splunk.com
|
|
internal.dashboards_trusted_domain.splunkdev = dev.splunk.com
|
|
internal.dashboards_trusted_domain.splunkui = splunkui.splunk.com
|
|
internal.dashboards_trusted_domain.splunkdownload = www.splunk.com/download
|
|
internal.dashboards_trusted_domain.splunkproducts = www.splunk.com/products
|
|
|
|
[feature:highcharts_accessibility]
|
|
|
|
# Determines whether or not Splunk Web loads the accessibility module in
|
|
# the highcharts charting library.
|
|
disable_highcharts_accessibility = true
|
|
|
|
[feature:dashboard_studio]
|
|
|
|
# Determines if the absolute "Show/Hide" panels are shown.
|
|
# Do not modify this value.
|
|
enable_show_hide = true
|
|
|
|
# Uses WebWorkers for Dynamic Options Syntax execution to isolate from overall dashboard loading and performance.
|
|
# A value of "true" means the WebWorkers are being used in Dashboard Studio.
|
|
# Do not modify this value.
|
|
activate_dsl_webworkers_for_visualizations = false
|
|
|
|
# Determines if the option to save a report directly from the Reports and Search pages to a Dashboard Studio dashboard is available.
|
|
# A value of "true" means the Add to Dashboard action permits adding reports to Dashboard Studio and Classic Simple XML dashboards.
|
|
# Do not modify this value.
|
|
activate_save_report_to_dashboard_studio = true
|
|
|
|
# Determines whether the source mode validation in Dashboard Studio is activated.
|
|
# A value of "true" means that source mode is validated in Dashboard Studio.
|
|
# Do not modify this value.
|
|
activate_source_mode_validation = true
|
|
|
|
# This setting turns on or off the UI to add multiple interactions on a visualization in Dashboard Studio during its initial rollout.
|
|
# A value of "true" means that the option to add multiple interactions appears in the Dashboard Studio UI.
|
|
# The setting will be removed without notice in a future release.
|
|
# Do not modify this value.
|
|
allow_multiple_interactions = true
|
|
|
|
# This setting turns on or off the ability to specify a corner radius for visualizations in Dashboard Studio during its initial rollout.
|
|
# A value of "true" means that the corner radius editor appears in the Dashboard Studio UI.
|
|
# The setting will be removed without notice in a future release.
|
|
# Do not modify this value.
|
|
show_corner_radius_editor = true
|
|
|
|
# This setting turns on or off scheduled email export in Dashboard Studio during its initial rollout.
|
|
# A value of "true" means the Scheduled Export option is available in Dashboard Studio.
|
|
# The setting will be removed without notice in a future release.
|
|
# Do not modify this value.
|
|
activate_scheduled_export = true
|
|
|
|
# This setting determines whether Dashboard Studio runs chain searches that use tokens ahead of time in the search process instead of the main splunkd process. If the base search is a scheduled save search, the search runs in the main splunkd process.
|
|
# A value of "true" means that Dashboard Studio runs chain searches that use tokens ahead of time in the search process.
|
|
# A value of "false" means that Dashboard Studio runs chain searches that use tokens in the main splunkd process rather than ahead of time in the search process.
|
|
execute_chain_searches_with_tokens_in_search_process = false
|
|
|
|
|
|
|
|
|
|
[feature::windows_rce]
|
|
|
|
# Determines whether to display the new Admin Config UI Framework
|
|
# version of the following Windows input pages: admin_win-event-log-collections,
|
|
# admin_win-perfmon, admin_win-wmi-collections, fwd_admin_win-perfmon.
|
|
enable_acuif_pages = true
|
|
|
|
[feature:page_migration]
|
|
# Determines whether or not Splunk Web loads the new triggered_alerts page.
|
|
enable_triggered_alerts_vnext = true
|
|
# Determines whether or not Splunk Web loads the new home page.
|
|
enable_home_vnext = true
|
|
# Determines whether or not Splunk Web loads the new datasets page.
|
|
enable_datasets_vnext = true
|
|
# Determines whether or not Splunk Web loads the new authentication methods page.
|
|
enable_authoverview_vnext = true
|
|
# Determines whether or not Splunk Web loads the reactified Users page.
|
|
enable_react_users_page = true
|
|
# Determines whether or not Splunk Web loads the reactified Password Management page.
|
|
enable_password_management_page_vnext = true
|
|
|
|
[feature:dashboard_inputs_localization]
|
|
# Determines whether or not Splunk Web will attempt to localize input choices in Classic dashboards.
|
|
enable_dashboard_inputs_localization = false
|
|
|
|
[feature:share_job]
|
|
# Determines whether or not share job is enabled.
|
|
enable_share_job_control = true
|
|
|
|
[feature:search_auto_format]
|
|
# CAUTION: Do not change this setting.
|
|
# Determines whether or not comments are auto-formatted by the search editor's auto-formatter.
|
|
enable_autoformatted_comments = false
|
|
|
|
[feature:ui_prefs_optimizations]
|
|
# CAUTION: Do not change this setting.
|
|
# Determines whether or not Splunk Web will optimize performance of the API related to ui-prefs.conf.
|
|
optimize_ui_prefs_performance = true
|
|
|
|
[feature:splunk_web_optimizations]
|
|
# CAUTION: Do not change this setting.
|
|
# Determines whether or not Splunk Web will optimize performance when generating the app bar.
|
|
enable_app_bar_performance_optimizations = true
|
|
|
|
# CAUTION: Do not change this setting.
|
|
# Splunk Web will not optimize performance when generating the app bar for this comma separated list of apps.
|
|
bypass_app_bar_performance_optimizations_apps = ""
|
|
|
|
# CAUTION: Do not change this setting.
|
|
# Splunk Web will cache the app bar to optimize performance when generating the app bar.
|
|
enable_app_bar_caching = true
|
|
|
|
[feature:spotlight_search]
|
|
# Determines whether Splunk Web displays the Spotlight Search bar in the Settings menu.
|
|
enable_spotlight_search = true
|
|
|
|
[feature:search_sidebar]
|
|
# Determines whether Splunk Web displays preview links and
|
|
# Splunk Observability preview sidebar in Search & Reporting
|
|
enable_sidebar_preview = true
|
|
|
|
[feature:field_filters]
|
|
# Determines whether Splunk Web displays field filters.
|
|
# A value of "false" means that field filters are not visible in Splunk Web.
|
|
enable_field_filters_ui = false
|
|
|
|
[feature:identity_sidecar_scim]
|
|
# Determines whether Splunk Web displays Automated User Management in SAML Configuration dialog.
|
|
enabled = true
|
|
|
|
|
|
[feature:appserver]
|
|
|
|
# Determines the version of python used by appserver.
|
|
python.version = latest
|