Splunk Enterprise Security

When opening Glass Tables page, I get the following Splunk ES Glass Tables Error?

panovattack
Communicator

All,

When opening Glass Tables page, I get the following error:

HTTPSConnectionPool(host='127.0.0.1', port=8089): Max retries exceeded with url: /servicesNS/nobody/SplunkEnterpriseSecuritySuite/storage/collections/config/SplunkEnterpriseSecuritySuite_glasstables (Caused by ProxyError('Cannot connect to proxy.', error('Tunnel connection failed: 503 Service Unavailable',)))

No proxy errors on other pages. Any ideas?

Labels (1)
0 Karma
1 Solution

panovattack
Communicator

Resolved by correcting the way the proxy handled the request.

View solution in original post

0 Karma

graissaguel
Explorer

Splunk use the API to access to the ES Glass Tables, so you need to configure the no_proxy setting (and by the way http_proxy, https_proxy and ftp_proxy) at the OS level.

On most of linux you have to add in the /etc/environment file :
no_proxy="127.0.0.1, localhost"

These settings are the same as in the [proxyConfig] section of the $SPLUNK_HOME/etc/system/local/server.conf file.

0 Karma

panovattack
Communicator

Resolved by correcting the way the proxy handled the request.

0 Karma

dm1
Contributor

Were you able to fix this ? Please share solution. Thanks

0 Karma

dm1
Contributor

@panovattack wrote:

Resolved by correcting the way the proxy handled the request.


I am getting similar error but its 403 forbidden for MISP42 app

Caused by ProxyError('Cannot connect to proxy.', OSError('Tunnel connection failed: 403 Forbidden

Please advise

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...