Getting Data In

How to force Splunk Web to use a proxy server for external calls (e.g. to Splunkbase) on Windows

Justin_Grant
Contributor

Splunk's web GUI makes a few external calls out, e.g. to load the list of available apps from Splunkbase.

If my corporate network has a proxy server, how can I configure Splunk Web to use that proxy server for its remote calls?

I'm running Splunk Web on Windows Server 2008, if that's important to the answer.

0 Karma

jrodman
Splunk Employee
Splunk Employee

If you set the environment variable http_proxy, splunkweb and splunkd should obey it, and definitely do in at least some cases. I haven't looked to see if all cases obey it correctly. I don't know if we've officially committed to supporting HTTP proxies, so unsure if any lapses would be bugs or feature requests.

In any event, on UNIX, this is as simple as adding

http_proxy=http://some.host.example.com:3452

to splunk-launch.conf

On windows, because of the way splunkd launches as a service, I'm uncertain, but in the very least you can create a global environment variable named http_proxy with the value as desired.

jrodman
Splunk Employee
Splunk Employee

Quite a while later -- I see that in urllib.py, that it will always sniff for http_proxy (with case smashed) unless no_proxy is set to defeat this.

Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...