Hi All,
Our Splunk infrastructure, including the Search Head, Cluster Master, Indexers, and License Master, is hosted in the Cloud and managed by Splunk Support. We are currently in the process of integrating the ZenGRC tool with Splunk.
On the ZenGRC tool side, there is a Splunk connector. I have created an account using the Splunk authentication method, with admin privileges. Following the documentation, when I attempted to connect to Splunk via the Connectors section in ZenGRC, I encountered an error message: "Failed to Connect: Unknown error."
https://reciprocitylabs.atlassian.net/wiki/spaces/ZenGRCOnboardingGuide/pages/562331727/Splunk+Conne...
For reference, the ZenGRC documentation providing information on the Splunk Connector can be found above.
When configuring the ZenGRC end, three pieces of information are required:
- Splunk Instance API URL: https://[yourdomain].splunkcloud.com:8089
- UserName/Email: xxx
- Password: yyy
Upon attempting to connect, the process fails. Additionally, I have whitelisted the IPs as indicated in the confluence documentation. Kindly provide guidance on resolving this issue.
IP Whitelisting - ZenGRC Wiki - Confluence (atlassian.net)
