Splunk Dev

How to pass Splunk Cloud verification for my Python script using the HTTP requests module?

guarisma
Contributor

My script works great On-Premise, but Splunk Cloud rejects it

I use the requests module to do HTTPS requests like this one

response = requests.post(url, auth=(user, pwd), headers=headers ,data=data)

In Splunk Cloud it gets rejected because it thinks it might be insecure, when passing parameters to the requests module, I must do parameter=

Possible insecure HTTP Connection. Match: requests.post Positional arguments, ["?"]; Keyword arguments, {"auth": "?", "headers": "?", "data": "?"} File: bin/alert_event.py Line Number: 46

I don't know how to fix this.

Anyone knows how to pass this test?

Labels (1)
0 Karma

lpuentes
New Member

Hello,

were you able to solve the problem? The same is happening to me.

Thanks. 

0 Karma

livehybrid
Champion

Before calling requests.post, add something like:

if not url.startswith("https"):
    logger.critical("URL must be HTTPS")
    exit(1)

This way when they vet your app they can see that a non-https url couldnt be used.  

0 Karma
Get Updates on the Splunk Community!

Fueling your curiosity with new Splunk ILT and eLearning courses

At Splunk Education, we’re driven by curiosity—both ours and yours! That’s why we’re committed to delivering ...

Splunk AI Assistant for SPL 1.1.0 | Now Personalized to Your Environment for Greater ...

Splunk AI Assistant for SPL has transformed how users interact with Splunk, making it easier than ever to ...

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureOn Demand Now Step boldly into the AI revolution with enhanced security ...