topic Re: Send JSON file/txt file using HEC - stuck on curl command in Getting Data In

Send JSON file/txt file using HEC - stuck on curl command

spharisha — Fri, 08 Sep 2017 00:43:23 GMT

Hello

Trying to send a JSON file/text file through HEC to splunk. Getting stuck while adding

"-d @data.json" in curl command. I have created a new token, enabled it, sent sample data like Hello world, and works. But, not sure how to send txt/json file using curl

Thanks
SP

Re: Send JSON file/txt file using HEC - stuck on curl command

yannK — Mon, 20 Aug 2018 17:57:05 GMT

example :

   curl -k https:/myserver:8088/services/collector/event -H 'Authorization: Splunk 0a211f9a-1a27-471b-b0e0-5a5bd2d9a88c' -d '{"event": "hello world"}'

Re: Send JSON file/txt file using HEC - stuck on curl command

PowerPacked — Mon, 20 Aug 2018 18:25:49 GMT

Hi @spharisha

I think you are trying to send the whole file using curl command,

& i feel like you should consider it by configuring inputs and send it to HEC index on indexer.

Thanks