Splunk Dev

How to pass Splunk Cloud verification for my Python script using the HTTP requests module?

guarisma
Contributor

My script works great On-Premise, but Splunk Cloud rejects it

I use the requests module to do HTTPS requests like this one

response = requests.post(url, auth=(user, pwd), headers=headers ,data=data)

In Splunk Cloud it gets rejected because it thinks it might be insecure, when passing parameters to the requests module, I must do parameter=

Possible insecure HTTP Connection. Match: requests.post Positional arguments, ["?"]; Keyword arguments, {"auth": "?", "headers": "?", "data": "?"} File: bin/alert_event.py Line Number: 46

I don't know how to fix this.

Anyone knows how to pass this test?

Labels (1)
0 Karma

lpuentes
New Member

Hello,

were you able to solve the problem? The same is happening to me.

Thanks. 

0 Karma

livehybrid
SplunkTrust
SplunkTrust

Before calling requests.post, add something like:

if not url.startswith("https"):
    logger.critical("URL must be HTTPS")
    exit(1)

This way when they vet your app they can see that a non-https url couldnt be used.  

0 Karma
Get Updates on the Splunk Community!

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...

Splunk and TLS: It doesn't have to be too hard

Overview Creating a TLS cert for Splunk usage is pretty much standard openssl.  To make life better, use an ...

Faster Insights with AI, Streamlined Cloud-Native Operations, and More New Lantern ...

Splunk Lantern is a Splunk customer success center that provides practical guidance from Splunk experts on key ...