All Apps and Add-ons

Splunk App for AWS: Proxy error reading from remote server

mlevsh
Builder

We installed Splunk Add-on for AWS and Splunk App for AWS. While it seems that we were able to configure Add-on for AWS and get some data (for aws::cloudtrail) - we are getting the error while trying to configure App for AWS:

Proxy Error: The proxy server received an invalid response from an upstream server , couldn't handle the request POST/en-US/splunkd/_raw/servicesNS/nobody/splunk_app_aws/saas-aws/splunk_app_aws_aws_accounts. Reason: Error reading from remote server.

For Splunk add-on for AWS there was an option to enable proxy server and there is no such option for Splunk app for AWS.
Any advice on a work around?

0 Karma

gjanders
SplunkTrust
SplunkTrust

Which version are you using? I'm running 5.0.2 and have no proxy configuration in the main app, I do have proxy configuration in the Amazon TA and I have no errors like this.

The mentioned URL looks like it cannot access your local Splunk instance which I would assume would normally bypass your proxy...

0 Karma

mlevsh
Builder

@garethatiag - using 5.0.2
We have proxy in Amazon TA as well, still not working

0 Karma

gjanders
SplunkTrust
SplunkTrust

Have a look at:

ls /opt/splunk/var/log/splunk/splunk_ta_aws_*

That should give you a hint of what is going wrong and where...

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...