All Apps and Add-ons
Highlighted

Splunk Add-on for Microsoft Cloud Services with proxy?

Communicator

I'm trying to use the above add-on to get Azure Audit logs, and I want to use a proxy. Everything is configured according to the docs, but any time the script tries to download the data, I'm getting 10061.
I double checked with wireshark, the script is not even trying to connect to my proxy, instead it tries connecting directly to the Microsoft servers. I'm running on a Windows server.

How can I get this working ?

Highlighted

Re: Splunk Add-on for Microsoft Cloud Services with proxy?

Engager

I have the same issue - I can't see any traffic to be forwarded to provided proxy. Does anybody manage it to run ?

0 Karma
Highlighted

Re: Splunk Add-on for Microsoft Cloud Services with proxy?

New Member

I am also struggling with the same. I have followed the doc to install, and since the forwarder is sitting behind a proxy, which majority of deployments do, can't connect to the proxy, instead Splunk forwarder is trying to directly connect to the MS cloud IP.
I have tried setting the proxy config in splunk-launch.conf, server.conf but nothing seem to work.

Has anyone figured out the solution?

Appreciate the help and comments!

0 Karma
Highlighted

Re: Splunk Add-on for Microsoft Cloud Services with proxy?

New Member

Figured it out.
Got it to working.
There is a config file inside the apps folder under the add-on, where the proxy settings has to be explicitly mentioned.

Under: /opt/splunk/etc/apps/SplunkTAmicrosoft-cloudservices/local/splunktamso365clientsettings.conf
[proxy]
proxy
enabled = 1
proxyrdns = 1
proxy
type = http

proxy_password = password of proxy account

proxyport = 8000
proxy
url = proxy1.your.server.com
disabled = 0

proxy_username = user name of proxy account

0 Karma