Security

Does Splunk Enterprise rely on OS for proxy configuration or does it have its own settings for proxy configuration?

atant
Splunk Employee
Splunk Employee

My customer is using proxy with authentication to access the internet for users and applications. Does Splunk Enterprise rely on OS for proxy configuration or does it have its own settings for proxy configuration?

tomasmoser
Contributor

Same issue on Splunk 8.0.x. I have tried any hint I found. Including addi HTTP_PROXY= into splunk-launch.conf for access to Internet via proxy and server.conf for access via S2S to any other Splunk node via proxy. DOES NOT work.

0 Karma

bowendenning
Path Finder

I'm not sure if this is what you're after, but take a look at: http://docs.splunk.com/Documentation/Splunk/6.1.3/admin/Specifyaproxyserver

Splunk uses the usual http_proxy" and https_proxy environment variables for proxy configuration. To add authentication, try using "HTTP_PROXY = username:password@proxyserver.net:8080". I haven't used this config before myself, but it's worth giving it a go.

ccrayto
Engager

Didn't work for me. I get a " Error resolving: Name or service not known" when attempting to browse apps in the UI.

0 Karma

tomasmoser
Contributor

Did you fix it?

0 Karma

dshpritz
SplunkTrust
SplunkTrust

Splunk has its own settings:

http://docs.splunk.com/Documentation/Splunk/6.1.3/admin/Specifyaproxyserver

Configuration is done in the splunk-launch.conf file.

ccrayto
Engager

This link is now dead. It is fascinating to me that people have had this issue for the past three years or more, and Splunk still does not make it easy to find an answer.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...