Splunk Enterprise Security

When opening Glass Tables page, I get the following Splunk ES Glass Tables Error?

panovattack
Communicator

All,

When opening Glass Tables page, I get the following error:

HTTPSConnectionPool(host='127.0.0.1', port=8089): Max retries exceeded with url: /servicesNS/nobody/SplunkEnterpriseSecuritySuite/storage/collections/config/SplunkEnterpriseSecuritySuite_glasstables (Caused by ProxyError('Cannot connect to proxy.', error('Tunnel connection failed: 503 Service Unavailable',)))

No proxy errors on other pages. Any ideas?

Labels (1)
0 Karma
1 Solution

panovattack
Communicator

Resolved by correcting the way the proxy handled the request.

View solution in original post

0 Karma

graissaguel
Explorer

Splunk use the API to access to the ES Glass Tables, so you need to configure the no_proxy setting (and by the way http_proxy, https_proxy and ftp_proxy) at the OS level.

On most of linux you have to add in the /etc/environment file :
no_proxy="127.0.0.1, localhost"

These settings are the same as in the [proxyConfig] section of the $SPLUNK_HOME/etc/system/local/server.conf file.

0 Karma

panovattack
Communicator

Resolved by correcting the way the proxy handled the request.

0 Karma

dm1
Contributor

Were you able to fix this ? Please share solution. Thanks

0 Karma

dm1
Contributor

@panovattack wrote:

Resolved by correcting the way the proxy handled the request.


I am getting similar error but its 403 forbidden for MISP42 app

Caused by ProxyError('Cannot connect to proxy.', OSError('Tunnel connection failed: 403 Forbidden

Please advise

0 Karma
Get Updates on the Splunk Community!

Using Machine Learning for Hunting Security Threats

REGISTER NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more ...

Security Highlights | November 2022 Newsletter

 November 2022 2022 Gartner Magic Quadrant for SIEM: Splunk Named a Leader for the 9th Year in a RowSplunk is ...

Platform Highlights | November 2022 Newsletter

 November 2022 Skill Up on Splunk with our New Builder Tech Talk SeriesCan you build it? Yes you can! *play ...