Splunk Cloud Platform

ZenGRC Integration with Splunk

anandhalagaras1
Contributor

Hi All,

Our Splunk infrastructure, including the Search Head, Cluster Master, Indexers, and License Master, is hosted in the Cloud and managed by Splunk Support. We are currently in the process of integrating the ZenGRC tool with Splunk.

On the ZenGRC tool side, there is a Splunk connector. I have created an account using the Splunk authentication method, with admin privileges. Following the documentation, when I attempted to connect to Splunk via the Connectors section in ZenGRC, I encountered an error message: "Failed to Connect: Unknown error."

https://reciprocitylabs.atlassian.net/wiki/spaces/ZenGRCOnboardingGuide/pages/562331727/Splunk+Conne... 

 

For reference, the ZenGRC documentation providing information on the Splunk Connector can be found above.

When configuring the ZenGRC end, three pieces of information are required:

  1. Splunk Instance API URL: https://[yourdomain].splunkcloud.com:8089
  2. UserName/Email: xxx
  3. Password: yyy

 

Upon attempting to connect, the process fails. Additionally, I have whitelisted the IPs as indicated in the confluence documentation. Kindly provide guidance on resolving this issue.

IP Whitelisting - ZenGRC Wiki - Confluence (atlassian.net)

 

 

 

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Now Playing: Splunk Education Summer Learning Premieres

It’s premiere season, and Splunk Education is rolling out new releases you won’t want to miss. Whether you’re ...

The Visibility Gap: Hybrid Networks and IT Services

The most forward thinking enterprises among us see their network as much more than infrastructure – it's their ...

Get Operational Insights Quickly with Natural Language on the Splunk Platform

In today’s fast-paced digital world, turning data into actionable insights is essential for success. With ...