

Self._negotiatesocks5(destpair, destpair)įile "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/socks.py", line 215, in _negotiatesocks5įile "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/socks.py", line 138, in _recvall (response, content) = self._conn_request(conn, request_uri, method, body, headers)įile "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/_init_.py", line 1257, in _conn_requestįile "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/_init_.py", line 1018, in connectįile "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/socks.py", line 410, in connect

(response, content) = self._request(conn, authority, uri, request_uri, method, body, headers, redirections, cachekey)įile "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/_init_.py", line 1335, in _request 14:29:17,488 ERROR pid=6473 tid=MainThread file=snow.py:run:82 | Failed to setup config for Snow TA: Failed to verify ServiceNow username and password, reason=Traceback (most recent call last):įile "/opt/splunk/etc/apps/Splunk_TA_snow/bin/snow_config.py", line 175, in verify_user_passįile "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/_init_.py", line 1593, in request # Valid proxy_type are http, http_no_tunnel, socks4, socks5Īnd yes the "dummy" is actually what the webgui puts in place of the actual username, though I have tried editing this manually in the nf file with no effect to get it to work. # If use proxy to do DNS resolution, set proxy_rdns to 1 Within the nf file (which isn't on the docs page about configuring it via conf files.) it has the conf file set out as:
#Splunk .conf 2017 mobile app. password
* When configuring the app via GUI, it placed "encrypted" in the username & password field values for both SNOW and Proxy settings. * When configuring the app via conf files, tried placing both username/password into the service_now.conf along with the other settings but this didn't work * Changed the web.conf setting to "splunkdConnectionTimeout = 30000" so shouldn't be timing out. * Tested SNOW user/pwd combo on the system itself with no issues * Using proxy settings (tried both IP and FQDN as per hxxps:///answers/312287/splunk-app-add-on-for-servicenow-why-am-i-getting.html I did try adding " at the beginning), seems like my proxy is socks 4/5 as using http as a option comes up with "HTTPError: (407, 'Proxy Authentication Required')" in the logs I have tried configuring it from the GUI and conf files, though there are differences as to how each modifys/creates apps in the local folder neither has worked. I am trying to get the ServiceNow add-on to work on a distributed Splunk infrastructure namely a HF.
