Alerting

Need alert with webhook to use a proxy server

rstrong30
Loves-to-Learn

I am attempting to get my splunk alert with webhook to hit an external server (slack api). I've configured the OS to work and I can successfully curl and hit the URL. But splunk apparently isn't using the OS configuration to get outside of our network, which is blocked with the exception of using a proxy.

someone help please!

Tags (1)
0 Karma

harsmarvania57
Ultra Champion

Hi @rstrong30,

Can you please let us know how you configured proxy on OS level, if you are running curl command without -x or --proxy which means it is using proxy from OS level configuration (for example reading proxy from /etc/profile on linux) in that case please restart splunk once and try to run alert again.

0 Karma
Get Updates on the Splunk Community!

See Splunk Platform & Observability Innovations at Cisco Live EMEA

Hi Splunkers, Learn about what’s next for Splunk Platform at Cisco Live EMEA.  Data silos are a big challenge ...

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...