topic Re: Splunk DB Connect and reverse proxy in Getting Data In

Splunk DB Connect and reverse proxy

kenmcgarrahan — Mon, 24 Feb 2014 12:03:18 GMT

Running Splunk (in trial mode) behind a reverse proxy (wiki.splunk.com/Community:SplunkBehindAProxy) and have a problem with the DB Connect app not using the configured context root for selected actions.

In ${SPLUNK_HOME}/system/local/web.conf:

[settings]
root_endpoint = /splunkv
tools.proxy.on = True

In the DB Connect configuration in the web console, the URL associated with the 'Database Connections in Splunk Manager' button lacks the '/splunkv'/ context. A 'hover' over indicates the URL is '//myhost/manager/dbx/dbx/databases', an invalid context which displays a 404 error when clicked. Manually correcting the URL to include the 'splunkv' context ('//myhost/splunkv/manager/dbx/dbx/databases') displays the page correctly and allows interaction with the DB Connect configuration.

Is there a corresponding DB Connect proxy setting which corrects this error? Is there a general solution which ensures adherence to the root_endpoint value in web.conf?

Re: Splunk DB Connect and reverse proxy

araitz — Mon, 24 Feb 2014 18:10:28 GMT

Yes, there are a few places we've recently identified that do not respect custom root endpoints. There aren't any quick workarounds available yet.

Would it be possible for you to open a support case so we can notify you when there is a fix available? I'll try to remember to update here as well.

Re: Splunk DB Connect and reverse proxy

kenmcgarrahan — Mon, 24 Feb 2014 18:21:00 GMT

No valid support contract (yet), so opening a support case isn't possible.

When production licenses are procured, I can add the support case.

Re: Splunk DB Connect and reverse proxy

araitz — Mon, 24 Feb 2014 18:24:54 GMT

Sounds good, appreciate it. If I can get a workaround or provide an update here, I will do so.