https://community.splunk.com/t5/Getting-Data-In/Does-the-HTTP-Event-Collector-API-support-events-with-arbitrary/m-p/387182#M69446 <P>3 years ago, someone asked my exact question:</P> <P>"Does the HTTP Event Collector API support events with arbitrary metadata?" (can't add a link, no karma)</P> <P>In short, POSTing <CODE>{"event": "hello world", "foo": "bar"}</CODE> results in <CODE>{"text":"No data","code":5}</CODE>.</P> <P>Has the answer changed significantly in the intervening time? If so, in which version, and is there any documentation?</P> <P>I'm using logstash 5.6 as a client.</P> Fri, 12 Jul 2019 20:15:25 GMT olivercole 2019-07-12T20:15:25Z https://community.splunk.com/t5/Getting-Data-In/Does-the-HTTP-Event-Collector-API-support-events-with-arbitrary/m-p/387182#M69446 <P>3 years ago, someone asked my exact question:</P> <P>"Does the HTTP Event Collector API support events with arbitrary metadata?" (can't add a link, no karma)</P> <P>In short, POSTing <CODE>{"event": "hello world", "foo": "bar"}</CODE> results in <CODE>{"text":"No data","code":5}</CODE>.</P> <P>Has the answer changed significantly in the intervening time? If so, in which version, and is there any documentation?</P> <P>I'm using logstash 5.6 as a client.</P> Fri, 12 Jul 2019 20:15:25 GMT https://community.splunk.com/t5/Getting-Data-In/Does-the-HTTP-Event-Collector-API-support-events-with-arbitrary/m-p/387182#M69446 olivercole 2019-07-12T20:15:25Z https://community.splunk.com/t5/Getting-Data-In/Does-the-HTTP-Event-Collector-API-support-events-with-arbitrary/m-p/387183#M69447 <P>What is it you are trying to solve? Because it depends what you mean by metadata and if you can control the HEC payload.</P> Tue, 16 Jul 2019 13:39:41 GMT https://community.splunk.com/t5/Getting-Data-In/Does-the-HTTP-Event-Collector-API-support-events-with-arbitrary/m-p/387183#M69447 starcher 2019-07-16T13:39:41Z