https://community.splunk.com/t5/Getting-Data-In/splunk-behind-a-revproxy/m-p/100243#M20955 <P>Hello,</P> <P>My setup:</P> <P>remote server:<BR /> -I have a universal forwarder setup on a GlassFish server.</P> <P>splunk server (Splunk 4.2):<BR /> -I have free splunk setup to only communicate on 127.0.0.1 <BR /> -I have iPlanet WS7 installed and acting as a reverse proxy<BR /> --I have two virtual servers setup, one to handle the web interface and one to handle the forwarder communication</P> <P>Now my issue is that the request getting sent to splunk via the forwarder are returning with a 400 status code and the message "--splunk-cooked-mode-v2--".</P> <P>Has anyone used a similar setup? and if so how did you handle your forwarder communication? I was thinking I could setup a light forwarder splunk instance on my server that proxies the data between my external ip and my internal ip, but I would like a cleaner solution (i.e. using my iPlanet WebServer). </P> <P>When proxying forwarder communication via a reverse proxy are there any settings I should be aware of and might be missing? Should I be rewriting some of the headers, change forwarder paramaters ...etc ?</P> <P>Thanks<BR /> Rob</P> Fri, 28 Oct 2011 20:14:41 GMT RobertFidler 2011-10-28T20:14:41Z https://community.splunk.com/t5/Getting-Data-In/splunk-behind-a-revproxy/m-p/100243#M20955 <P>Hello,</P> <P>My setup:</P> <P>remote server:<BR /> -I have a universal forwarder setup on a GlassFish server.</P> <P>splunk server (Splunk 4.2):<BR /> -I have free splunk setup to only communicate on 127.0.0.1 <BR /> -I have iPlanet WS7 installed and acting as a reverse proxy<BR /> --I have two virtual servers setup, one to handle the web interface and one to handle the forwarder communication</P> <P>Now my issue is that the request getting sent to splunk via the forwarder are returning with a 400 status code and the message "--splunk-cooked-mode-v2--".</P> <P>Has anyone used a similar setup? and if so how did you handle your forwarder communication? I was thinking I could setup a light forwarder splunk instance on my server that proxies the data between my external ip and my internal ip, but I would like a cleaner solution (i.e. using my iPlanet WebServer). </P> <P>When proxying forwarder communication via a reverse proxy are there any settings I should be aware of and might be missing? Should I be rewriting some of the headers, change forwarder paramaters ...etc ?</P> <P>Thanks<BR /> Rob</P> Fri, 28 Oct 2011 20:14:41 GMT https://community.splunk.com/t5/Getting-Data-In/splunk-behind-a-revproxy/m-p/100243#M20955 RobertFidler 2011-10-28T20:14:41Z https://community.splunk.com/t5/Getting-Data-In/splunk-behind-a-revproxy/m-p/100244#M20956 <P>as of May/2012 it's was not supported, nor tested by Splunk I've spent lots of time trying to make it working but no success... Then I got the above answer from support...</P> <P>Did you manage to get Splunk forwarder sending data to indexer through Apache reverse proxy? I need this feature too</P> Thu, 11 Oct 2012 23:51:12 GMT https://community.splunk.com/t5/Getting-Data-In/splunk-behind-a-revproxy/m-p/100244#M20956 MaximusBCSplunk 2012-10-11T23:51:12Z