Webhook alert actions are failing with
urlopen error [Errno 101] Network is unreachable
Proxy settings added to:
server.conf
[proxyConfig]
http_proxy = http://<ip>:<port>
https_proxy = http://<ip>:<port>
no_proxy = <ip>
splunk-launch.conf
HTTP_PROXY=http://<ip>:<port>
HTTPS_PROXY=http://<ip>:<port>
NO_PROXY=localhost,127.0.0.1
Confirmed that we can successfully do curl via proxy, but the alert does not go through the proxy.
Patching webhook.py directly to add an explicit ProxyHandler has no effect, which leads us to believe Splunk 9.4 may have internalized the webhook implementation and no longer executes this file.
Is there a supported configuration we're missing?
@beataficek refer the below Splunk official document to configure the webhook