All Apps and Add-ons

Splunk App for AWS: Proxy error reading from remote server

mlevsh
Builder

We installed Splunk Add-on for AWS and Splunk App for AWS. While it seems that we were able to configure Add-on for AWS and get some data (for aws::cloudtrail) - we are getting the error while trying to configure App for AWS:

Proxy Error: The proxy server received an invalid response from an upstream server , couldn't handle the request POST/en-US/splunkd/_raw/servicesNS/nobody/splunk_app_aws/saas-aws/splunk_app_aws_aws_accounts. Reason: Error reading from remote server.

For Splunk add-on for AWS there was an option to enable proxy server and there is no such option for Splunk app for AWS.
Any advice on a work around?

0 Karma

gjanders
SplunkTrust
SplunkTrust

Which version are you using? I'm running 5.0.2 and have no proxy configuration in the main app, I do have proxy configuration in the Amazon TA and I have no errors like this.

The mentioned URL looks like it cannot access your local Splunk instance which I would assume would normally bypass your proxy...

0 Karma

mlevsh
Builder

@garethatiag - using 5.0.2
We have proxy in Amazon TA as well, still not working

0 Karma

gjanders
SplunkTrust
SplunkTrust

Have a look at:

ls /opt/splunk/var/log/splunk/splunk_ta_aws_*

That should give you a hint of what is going wrong and where...

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud's AI Assistant in Action Series: Auditing Compliance and ...

This is the third post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...