All Apps and Add-ons

How to use multiple proxies

mcantaloube
Explorer

Hi i want to use multiple proxies.
Here are my settings:

/opt/splunk/etc/apps/website_monitoring/local/website_monitoring.conf
[default]
proxy_type = http
thread_limit = 200
proxy_port = 8080
proxy_server = 10.1.1.1

[zscaler-eu]
proxy_type = http
thread_limit = 200
proxy_port = 80
proxy_server = 10.1.1.2

/opt/splunk/etc/apps/website_monitoring/local/website_monitoring.conf

[web_ping://www_microsoft_com]
configuration = default
interval = 5m
title = www.microsoft.com (via Proxy1)
url = https://www.microsoft.com
user_agent = Splunk Website Monitoring (+https://splunkbase.splunk.com/app/1493/)

[web_ping://www_cisco_com]
configuration = default
interval = 5m
title = www.cisco.com (via Proxy1)
url = https://www.cisco.com
user_agent = Splunk Website Monitoring (+https://splunkbase.splunk.com/app/1493/)

[web_ping://www_microsoft_com_zscaler-eu]
configuration=zscaler-eu
interval = 5m
title = www.microsoft.com (via Proxy2)
url = https://www.microsoft.com
user_agent = Splunk Website Monitoring (+https://splunkbase.splunk.com/app/1493/)

The config with default proxy is working, but not the second one.
I get the folowing error in the log. The proxy config seems to not be found. (the stanza in inputs.conf is correctly detected: stanza=zscaler-eu)

2018-03-27 19:31:23,072 DEBUG Removing inactive thread for stanza=web_ping://www_microsoft_com_zscaler-eu, thread_count=1
2018-03-27 19:31:23,072 INFO Removed inactive threads, thread_count=0, removed_thread_count=1
2018-03-27 19:31:23,074 INFO Added thread to the queue for stanza=web_ping://www_microsoft_com_zscaler-eu, thread_count=1
2018-03-27 19:31:23,512 ERROR Unable to find the app configuration for the specified configuration stanza=zscaler-eu, error="not found"
2018-03-27 19:31:23,512 ERROR The proxy configuration could not be loaded (was not found). The execution will be skipped for this input with stanza=web_ping://www_microsoft_com_zscaler-eu

Tags (1)
0 Karma

LukeMurphey
Champion

This appears to be a bug from what I can tell. I opened a bug report to get this fixed (https://lukemurphey.net/issues/2236). I'm planning to get this done for version 2.7 which is pretty close to being done.

0 Karma

mcantaloube
Explorer

Hi thanks a lot for your answer?
Do you have any ETA for this new version ?

0 Karma

LukeMurphey
Champion

I'm going to be conservative and say two and half weeks from now. I'm actually shooting for earlier though (this weekend).

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

How much can you really learn in 3 minutes?

Observability can certainly be hard to understand – there's a lot of jargon and buzzwords and it seems to ...

Event Series: The Agentic SOC: Trust Before Autonomy

AI is fundamentally changing security operations, but true progress requires more than just automation—it ...

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...