https://community.splunk.com/t5/Splunk-Cloud-Platform/HttpEventCollector-is-GZip-encoding-supported/m-p/600821#M1479 <P>Hi,<BR />Should I sent event logs to HttpEventCollector in GZip encoding or only in plain text ?</P> Tue, 07 Jun 2022 15:06:14 GMT arielgilad 2022-06-07T15:06:14Z https://community.splunk.com/t5/Splunk-Cloud-Platform/HttpEventCollector-is-GZip-encoding-supported/m-p/600821#M1479 <P>Hi,<BR />Should I sent event logs to HttpEventCollector in GZip encoding or only in plain text ?</P> Tue, 07 Jun 2022 15:06:14 GMT https://community.splunk.com/t5/Splunk-Cloud-Platform/HttpEventCollector-is-GZip-encoding-supported/m-p/600821#M1479 arielgilad 2022-06-07T15:06:14Z https://community.splunk.com/t5/Splunk-Cloud-Platform/HttpEventCollector-is-GZip-encoding-supported/m-p/601291#M1499 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/246536">@arielgilad</a>&nbsp;Splunk excepts the HEC data to be ingested in json by default.</P> Fri, 10 Jun 2022 02:44:52 GMT https://community.splunk.com/t5/Splunk-Cloud-Platform/HttpEventCollector-is-GZip-encoding-supported/m-p/601291#M1499 Roy_9 2022-06-10T02:44:52Z https://community.splunk.com/t5/Splunk-Cloud-Platform/HttpEventCollector-is-GZip-encoding-supported/m-p/601298#M1500 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/224632">@Roy_9</a>You're talking about event formatting while <a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/246536">@arielgilad</a> means transfer encoding.</P><P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/246536">@arielgilad</a>I suppose it does. Try and see.</P> Fri, 10 Jun 2022 06:04:39 GMT https://community.splunk.com/t5/Splunk-Cloud-Platform/HttpEventCollector-is-GZip-encoding-supported/m-p/601298#M1500 PickleRick 2022-06-10T06:04:39Z