All Apps and Add-ons

Add-on Builder Support for HTTPS Proxy

johannthum
Explorer

Hi all,

I have a custom alert action (built with Splunk Add-on Builder) that forward alert results over HTTPS when it triggers, and I need to send it via a proxy in my current setup, so I include the Proxy configuration settings in the setup page. However, it appears that the supported proxy type are http, socks4 and socks5 on the latest version. Correct me if I'm wrong, since my data is gonna be sent over HTTPS, does it mean I would need HTTPS proxy and not HTTP proxy? If so, how is the effort like to include HTTPS proxy in the setup, or what are the alternatives I have? Thanks in advance!!

p/s: I'm have been unsuccessful to send data with http proxy, and script logic was tested to be fine.

0 Karma
1 Solution

chli_splunk
Splunk Employee
Splunk Employee

My understanding is they are not related. You can choose either http or https proxy to forward your data to https server. Actually you can ask your proxy provider what proxy types it supports, then choose it in UI. AoB supports popular proxy types but not all of them.

View solution in original post

chli_splunk
Splunk Employee
Splunk Employee

My understanding is they are not related. You can choose either http or https proxy to forward your data to https server. Actually you can ask your proxy provider what proxy types it supports, then choose it in UI. AoB supports popular proxy types but not all of them.

gpark2_splunk
Splunk Employee
Splunk Employee

I do not see a "https" proxy option when I try to configure a rest input. Are you saying that the "https" method is not supported?

0 Karma

johannthum
Explorer

@gpark2_splunk , yup, I know "https" proxy is not supported. And I was trying to check the implication of that, i.e. if I would need https proxy in order to send data over https. Turned out they are not related in that sense as mentioned by chli.

The issue was really in the script itself, which I have fixed and is working now.

0 Karma

johannthum
Explorer

Thanks for your response,

Yep, that's the impression I have too based on what I read. Hm let me check with the provider on that. Thanks again!

0 Karma
Get Updates on the Splunk Community!

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

March Community Office Hours Security Series Uncovered!

Hello Splunk Community! In March, Splunk Community Office Hours spotlighted our fabulous Splunk Threat ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars in April. This post ...