Splunk Enterprise Security

When opening Glass Tables page, I get the following Splunk ES Glass Tables Error?

panovattack
Communicator

All,

When opening Glass Tables page, I get the following error:

HTTPSConnectionPool(host='127.0.0.1', port=8089): Max retries exceeded with url: /servicesNS/nobody/SplunkEnterpriseSecuritySuite/storage/collections/config/SplunkEnterpriseSecuritySuite_glasstables (Caused by ProxyError('Cannot connect to proxy.', error('Tunnel connection failed: 503 Service Unavailable',)))

No proxy errors on other pages. Any ideas?

Labels (1)
0 Karma
1 Solution

panovattack
Communicator

Resolved by correcting the way the proxy handled the request.

View solution in original post

0 Karma

graissaguel
Explorer

Splunk use the API to access to the ES Glass Tables, so you need to configure the no_proxy setting (and by the way http_proxy, https_proxy and ftp_proxy) at the OS level.

On most of linux you have to add in the /etc/environment file :
no_proxy="127.0.0.1, localhost"

These settings are the same as in the [proxyConfig] section of the $SPLUNK_HOME/etc/system/local/server.conf file.

0 Karma

panovattack
Communicator

Resolved by correcting the way the proxy handled the request.

0 Karma

dm1
Contributor

Were you able to fix this ? Please share solution. Thanks

0 Karma

dm1
Contributor

@panovattack wrote:

Resolved by correcting the way the proxy handled the request.


I am getting similar error but its 403 forbidden for MISP42 app

Caused by ProxyError('Cannot connect to proxy.', OSError('Tunnel connection failed: 403 Forbidden

Please advise

0 Karma
Get Updates on the Splunk Community!

Enter the Dashboard Challenge and Watch the .conf24 Global Broadcast!

The Splunk Community Dashboard Challenge is still happening, and it's not too late to enter for the week of ...

Join Us at the Builder Bar at .conf24 – Empowering Innovation and Collaboration

What is the Builder Bar? The Builder Bar is more than just a place; it's a hub of creativity, collaboration, ...

Combine Multiline Logs into a Single Event with SOCK - a Guide for Advanced Users

This article is the continuation of the “Combine multiline logs into a single event with SOCK - a step-by-step ...