Deployment Architecture

Deployment Server Behind HTTPS Proxy

my2ndhead
SplunkTrust
SplunkTrust

Instead of having a deployment-server chain, I would like to provide access for some deployment clients through a https proxy.

I have set up an apache https proxy and I can see the initial request going through (status 200).

The second request fails with status 404:

192.168.178.115 - - [15/Jul/2013:10:49:36 +0200] "POST /services/broker/connect/CA398386-0AEA-46D2-A0FE-021A963DB8CC/windows7/163460/windows-x64/8089 HTTP/1.0" 200 107
192.168.178.115 - - [15/Jul/2013:10:49:36 +0200] "POST /services/broker/channel/subscribe/connection_192.168.178.210_8089_splunk_windows7_CA398386-0AEA-46D2-A0FE-021A963DB8CC/tenantService%2Fhandshake%2Freply%2Fwindows7%2FCA398386-0AEA-46D2-A0FE-021A963DB8CC HTTP/1.0" 404 392

I have tried to set up Apache in both forwarding and reverse proxy mode.

Any ideas?

Tags (1)
1 Solution

my2ndhead
SplunkTrust
SplunkTrust

Probably something has changed in one of the recent releases.

This nginx configuration seems to work. Not sure if it supported.

splunkd.conf:

 upstream splunkrest {
            ip_hash;
            server <mysplunkserver>:8089;
        }

    server {
            listen 8089 ssl;

            ssl_certificate     /opt/splunk/etc/auth/server.pem;
            ssl_certificate_key /opt/splunk/etc/auth/server.pem;

            location /services {
                proxy_pass https://splunkrest;

            }
        }

View solution in original post

my2ndhead
SplunkTrust
SplunkTrust

Probably something has changed in one of the recent releases.

This nginx configuration seems to work. Not sure if it supported.

splunkd.conf:

 upstream splunkrest {
            ip_hash;
            server <mysplunkserver>:8089;
        }

    server {
            listen 8089 ssl;

            ssl_certificate     /opt/splunk/etc/auth/server.pem;
            ssl_certificate_key /opt/splunk/etc/auth/server.pem;

            location /services {
                proxy_pass https://splunkrest;

            }
        }

nurtdi
Path Finder

I am looking for same setup info... did you find a solution?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Think Like an Architect: Introducing the Splunk Certified Cybersecurity Defense ...

In cybersecurity, defenders respond to threats. Architects design the systems that stop them.    As ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...