All Apps and Add-ons

Add-on Builder Support for HTTPS Proxy

johannthum
Explorer

Hi all,

I have a custom alert action (built with Splunk Add-on Builder) that forward alert results over HTTPS when it triggers, and I need to send it via a proxy in my current setup, so I include the Proxy configuration settings in the setup page. However, it appears that the supported proxy type are http, socks4 and socks5 on the latest version. Correct me if I'm wrong, since my data is gonna be sent over HTTPS, does it mean I would need HTTPS proxy and not HTTP proxy? If so, how is the effort like to include HTTPS proxy in the setup, or what are the alternatives I have? Thanks in advance!!

p/s: I'm have been unsuccessful to send data with http proxy, and script logic was tested to be fine.

0 Karma
1 Solution

chli_splunk
Splunk Employee
Splunk Employee

My understanding is they are not related. You can choose either http or https proxy to forward your data to https server. Actually you can ask your proxy provider what proxy types it supports, then choose it in UI. AoB supports popular proxy types but not all of them.

View solution in original post

chli_splunk
Splunk Employee
Splunk Employee

My understanding is they are not related. You can choose either http or https proxy to forward your data to https server. Actually you can ask your proxy provider what proxy types it supports, then choose it in UI. AoB supports popular proxy types but not all of them.

gpark2_splunk
Splunk Employee
Splunk Employee

I do not see a "https" proxy option when I try to configure a rest input. Are you saying that the "https" method is not supported?

0 Karma

johannthum
Explorer

@gpark2_splunk , yup, I know "https" proxy is not supported. And I was trying to check the implication of that, i.e. if I would need https proxy in order to send data over https. Turned out they are not related in that sense as mentioned by chli.

The issue was really in the script itself, which I have fixed and is working now.

0 Karma

johannthum
Explorer

Thanks for your response,

Yep, that's the impression I have too based on what I read. Hm let me check with the provider on that. Thanks again!

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...