Splunk Enterprise

Feature-Request: Add proxy-server for not directly connectecd SH

LoMueller
Explorer

Is it possible to implement the possibility to use a proxy url to download the vendor oui-file?

Thanks

Labels (1)
0 Karma

frankwayne
Path Finder

Hello, @LoMueller, and thanks, @livehybrid.

My contact information is in the TA's README and default/app.conf.

I am leaving for a trip this week, but I will be back on August 18. I can add a configuration file to set up a proxy for Python. Please send me a reminder after the 18th, @LoMueller, and I will try to get that done for you.

LoMueller
Explorer

Hi Frank,
I just found a quick-fix with inline-code enhancements in file but appreciate it using a configfile as mentioned.

/opt/splunk/etc/apps/TA_oui-lookup/bin/get-oui-table.py

proxy_host = 'localhost:1234'    # host and port of your proxy

OUI_URL = "https://standards-oui.ieee.org"

req = urllib.request.Request(OUI_URL)

req.set_proxy(proxy_host, 'http')

req.add_header("User-agent", USER_AGENT)

 Enjoy your vacation!

Lothar from Germany

Tags (1)
0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @LoMueller 

Based on the existing code for this TA (https://github.com/thatfrankwayne/TA_oui-lookup) its using the python requests library, so therefore it should be possible to implement a proxy for this with some code changes.

There are no contact details for the author ( @frankwayne ) in the app so I would recommend raising an issue on GitHub with the feature request and then hopefully it can be worked in to a future version.

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...