https://community.splunk.com/t5/Getting-Data-In/403-Error-on-some-requesets/m-p/673983#M112817 <P>Hello all,</P><P>I send some logs from multiple endpoints to a standalone Splunk HTTP Event Collector. Many logs are sent successfully but some of them (same index, same endpoint, ...) .&nbsp;But some of them get 403 when sending and are not sent. I think maybe it's for threads or sockets.</P><P>Any ideas are appreciated <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Thu, 11 Jan 2024 20:07:30 GMT sigma 2024-01-11T20:07:30Z https://community.splunk.com/t5/Getting-Data-In/403-Error-on-some-requesets/m-p/673983#M112817 <P>Hello all,</P><P>I send some logs from multiple endpoints to a standalone Splunk HTTP Event Collector. Many logs are sent successfully but some of them (same index, same endpoint, ...) .&nbsp;But some of them get 403 when sending and are not sent. I think maybe it's for threads or sockets.</P><P>Any ideas are appreciated <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Thu, 11 Jan 2024 20:07:30 GMT https://community.splunk.com/t5/Getting-Data-In/403-Error-on-some-requesets/m-p/673983#M112817 sigma 2024-01-11T20:07:30Z https://community.splunk.com/t5/Getting-Data-In/403-Error-on-some-requesets/m-p/674052#M112829 <P>HEC error 403 is a token problem.&nbsp; Check that the sender is configured properly.</P><P><A href="https://docs.splunk.com/Documentation/Splunk/latest/Data/TroubleshootHTTPEventCollector#Possible_error_codes" target="_blank">https://docs.splunk.com/Documentation/Splunk/latest/Data/TroubleshootHTTPEventCollector#Possible_error_codes</A></P> Fri, 12 Jan 2024 13:57:14 GMT https://community.splunk.com/t5/Getting-Data-In/403-Error-on-some-requesets/m-p/674052#M112829 richgalloway 2024-01-12T13:57:14Z