topic Re: Why is My Splunk 7.0.2 Install Missing HTTP Event Collector Option? in Getting Data In

Why is My Splunk 7.0.2 Install Missing HTTP Event Collector Option?

trumpjk — Wed, 14 Feb 2018 18:42:28 GMT

I would like to setup HEC but do not see the option under Settings -> Data Inputs. What do I have to do to enable HEC? The server I am trying to configure this on is the indexer, not clustered but set up to do a distributed search.

Re: Why is My Splunk 7.0.2 Install Missing HTTP Event Collector Option?

iandrews_splunk — Thu, 15 Feb 2018 14:39:21 GMT

I see it in mine. Do you have the "splunk_httpinput" app in etc/apps?

Re: Why is My Splunk 7.0.2 Install Missing HTTP Event Collector Option?

trumpjk — Thu, 15 Feb 2018 15:30:43 GMT

Yes it is there. Here is what is in the inputs.conf:

[http]
disabled=1
port=8088
enableSSL=1
dedicatedIoThreads=2
maxThreads = 0
maxSockets = 0
useDeploymentServer=0

ssl settings are similar to mgmt server

sslVersions=*,-ssl2
allowSslCompression=true
allowSslRenegotiation=true

NOTE: Disabled was set to 0, I changed to 1 but made no difference.