https://community.splunk.com/t5/Splunk-Cloud-Platform/POST-request-out-of-Splunk-Cloud-to-create-an-EnCase-ticket/m-p/321173#M795 <P>I am currently using HTTP to trigger the POST request. Does it need to be HTTPS from Splunk Cloud to EnCase? What port (443, 8089)?</P> Fri, 19 Jan 2018 20:04:03 GMT zshainsky 2018-01-19T20:04:03Z https://community.splunk.com/t5/Splunk-Cloud-Platform/POST-request-out-of-Splunk-Cloud-to-create-an-EnCase-ticket/m-p/321172#M794 <P>Hi All,</P> <P>I am looking to send a POST request from Splunk Cloud to start an EnCase forensic investigation which is running on-prem. So far the two options I see are to use the <STRONG>Webhook Alert Action</STRONG> or to create a <STRONG>POST Workflow Action</STRONG>. </P> <P>I have configured a POST Workflow Action, but I am not seeing any traffic coming from Splunk Cloud back to my Firewall. I have opened the ip and port inbound from the Splunk Cloud Search Head through my FW. I am not seeing anything in the _internal logs on the SH. Any troubleshooting steps I can take?</P> <P>Has any one gotten this to work in Splunk Cloud? Any suggestions welcome!</P> <P>Other things to consider:<BR /> - There is a HF set up on prem that could be used to communicate with Splunk Cloud and send the request on the internal network</P> Fri, 19 Jan 2018 19:31:35 GMT https://community.splunk.com/t5/Splunk-Cloud-Platform/POST-request-out-of-Splunk-Cloud-to-create-an-EnCase-ticket/m-p/321172#M794 zshainsky 2018-01-19T19:31:35Z https://community.splunk.com/t5/Splunk-Cloud-Platform/POST-request-out-of-Splunk-Cloud-to-create-an-EnCase-ticket/m-p/321173#M795 <P>I am currently using HTTP to trigger the POST request. Does it need to be HTTPS from Splunk Cloud to EnCase? What port (443, 8089)?</P> Fri, 19 Jan 2018 20:04:03 GMT https://community.splunk.com/t5/Splunk-Cloud-Platform/POST-request-out-of-Splunk-Cloud-to-create-an-EnCase-ticket/m-p/321173#M795 zshainsky 2018-01-19T20:04:03Z