Hurricane Labs App for Shodan Unable to Add API

[securitypaul]

Posting this in the correct forum 🙂

Hello everyone.

Standalone Splunk Enterprise 8.2.2 on Ubuntu 21.04.

I have the Hurricane Labs App for Shodan installed. Following the directions, I have obtained a SHODAN API key to configure the App.

When I go to the "App Setup" page it only shows a white rectangle, rather than somewhere to enter the API key.

I have allowed access to api.shodan.io for http/https through my firewall from the Splunk server.

Tried it with Firefox/Edge and disabling browser add-ons.

Any idea why it is not working? Any help appreciated.

Paul

[mricharf]

You're not the only one. When I search _internal, I see this error coming from splunk_web_service

---

2021-09-17 14:13:09,196 INFO [6144dab5317ff3585a7a10] error:321 - Masking the original 404 message: 'The path '/en-US/static/@ab7a85abaa98/app/Hurricane_Labs_App_for_Shodan/javascript/vendor/React.production.min.js' was not found.' with 'Page not found!' for security reasons

---

[mricharf · Accepted solution]

Rolled back to 2.1.0 and API entry works. I've reached out to the developer contact.

[mricharf]

Just received from the developer:

Thanks for bringing this to our attention.

I had actually pushed a fix for this earlier today but forgot to update the version on Splunkbase.

Version 2.2.1 is now up on Splunkbase so it should fix this issue. If it does not please let me know and I'll take a look.

[securitypaul]

Thank you. I've installed 2.1.0 and I can now see that page. Interested to hear what the developer comes back with.