RE: HTTP Event Collector target index- Is there a way to specify in the curl command the target index?

mark-jones — Sun, 18 Sep 2022 23:30:32 GMT

Hello,

Is there a way to specify in the curl command the target index?

For example with the following command, how can i target an index named: scheduler in the command line?

curl -k https://prd-plot.splunkcloud.com:8088/services/collector -H "Authorization:Splunk #####-4f99-b680-72c7bd33f9bb" -d "{\"sourcetype\"😕"_json\",\"event\": {\"a\": \"value1\", \"b\": [\"value1_1\", \"value1_2\"]}}"

Thanks,

Mark

Re: RE: HTTP Event Collector target index

richgalloway — Sat, 17 Sep 2022 00:10:15 GMT

You should be able to specify the index the same you do the sourcetype.

curl -k https://prd-plot.splunkcloud.com:8088/services/collector -H "Authorization:Splunk #####-4f99-b680-72c7bd33f9bb" -d "{\"sourcetype\":\"_json\",\"index\": \"scheduler\",\"event\": {\"a\": \"value1\", \"b\": [\"value1_1\", \"value1_2\"]}}"

topic RE: HTTP Event Collector target index- Is there a way to specify in the curl command the target index? in Getting Data In

RE: HTTP Event Collector target index- Is there a way to specify in the curl command the target index?

Re: RE: HTTP Event Collector target index