Splunk Enterprise Security

When opening Glass Tables page, I get the following Splunk ES Glass Tables Error?

panovattack
Communicator

All,

When opening Glass Tables page, I get the following error:

HTTPSConnectionPool(host='127.0.0.1', port=8089): Max retries exceeded with url: /servicesNS/nobody/SplunkEnterpriseSecuritySuite/storage/collections/config/SplunkEnterpriseSecuritySuite_glasstables (Caused by ProxyError('Cannot connect to proxy.', error('Tunnel connection failed: 503 Service Unavailable',)))

No proxy errors on other pages. Any ideas?

Labels (1)
0 Karma
1 Solution

panovattack
Communicator

Resolved by correcting the way the proxy handled the request.

View solution in original post

0 Karma

graissaguel
Explorer

Splunk use the API to access to the ES Glass Tables, so you need to configure the no_proxy setting (and by the way http_proxy, https_proxy and ftp_proxy) at the OS level.

On most of linux you have to add in the /etc/environment file :
no_proxy="127.0.0.1, localhost"

These settings are the same as in the [proxyConfig] section of the $SPLUNK_HOME/etc/system/local/server.conf file.

0 Karma

panovattack
Communicator

Resolved by correcting the way the proxy handled the request.

0 Karma

dm1
Contributor

Were you able to fix this ? Please share solution. Thanks

0 Karma

dm1
Contributor

@panovattack wrote:

Resolved by correcting the way the proxy handled the request.


I am getting similar error but its 403 forbidden for MISP42 app

Caused by ProxyError('Cannot connect to proxy.', OSError('Tunnel connection failed: 403 Forbidden

Please advise

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...