Unable to get data into Splunk Cloud using HEC

namratakar76 — Sun, 02 Jul 2023 13:40:59 GMT

Hi All,

I am trying to get data into my Splunk Cloud trial account using HTTP event collector. After configuring the required steps for setting up HEC, I am executing the following command:

curl -k https://prd-<instance>.splunkcloud.com:8088/services/collector/event -H "Authorization: Splunk <token>"

However, I am getting the following error:

{"text": "The requested URL was not found on this server.","code":404}

Am I using the correct URL for this, or is this related to something in the configuration? The tokens are enabled, and when I am checking the health of the instance, it returns this - {"text": "HEC is healthy","code":17}.

Re: Unable to get data into Splunk Cloud using HEC

richgalloway — Sun, 02 Jul 2023 14:27:04 GMT

The standard form for the HEC URI in Splunk Cloud Platform free trials is:

https://http-inputs-<host>.splunkcloud.com:8088/<endpoint

See https://docs.splunk.com/Documentation/Splunk/8.2.4/Data/UsetheHTTPEventCollector#Send_data_to_HTTP_Event_Collector_on_Splunk_Cloud_Platform

topic Unable to get data into Splunk Cloud using HEC in Splunk Cloud Platform

Unable to get data into Splunk Cloud using HEC

Re: Unable to get data into Splunk Cloud using HEC