All Apps and Add-ons

Slack Alerts via Web Proxy

nbonner
Explorer

Is there a way to configure the Slack Alerts App to use a web proxy? The search head is in a data center where internet access is restricted unless it goes through a web proxy. The only settings I have found in Splunk are for sending all Splunkd communications through a proxy which is not ideal. The search head is running on windows server 2012R2 so I did attempt to set the windows proxy but it does not seem like Splunk picks up on that for 80/443 connections. Anyone know how to get this working?

Thanks

0 Karma
1 Solution

ziegfried
Influencer

This is not possible with the current version of the app. Since this is a repeated ask, it is on the TODO list, though.

View solution in original post

ankit4817
Explorer

I fixed the issue for my slack alerts by adding the lines below in slack.py (splunk\etc\apps\slack_alerts\bin\slack.py)
import os

proxy = 'http://:@:'

os.environ['http_proxy'] = proxy
os.environ['HTTP_PROXY'] = proxy
os.environ['https_proxy'] = proxy
os.environ['HTTPS_PROXY'] = proxy

season88481
Contributor

Perfect, that works fine to me.

0 Karma

ziegfried
Influencer

This is not possible with the current version of the app. Since this is a repeated ask, it is on the TODO list, though.

simony
Path Finder

I would also be very interested in if there is a possibility to use the Slack app via a web proxy.

nschmalz
Engager

would be awesome to have the opportunity to configure a separate web proxy!

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...