topic Re: Http Event Collector output not being indexed? in Getting Data In

Http Event Collector output not being indexed?

arun_kant_sharm — Tue, 25 Jun 2019 06:51:37 GMT

Hi Experts,
I configured HEC input, after that I run curl command using that token, it returns {"text":"Success","code":0}.
But no event comes into my INDEX.
Any suggestions on how to proceed?
Thanks in advance.

Re: Http Event Collector output not being indexed?

renjith_nair — Wed, 30 Sep 2020 01:03:13 GMT

@arun_kant_sharma,

Have you searched in the default index which you have configured while creating the token ?

Re: Http Event Collector output not being indexed?

harsmarvania57 — Tue, 25 Jun 2019 07:44:42 GMT

Hi,

Can you please change sourcetype from _json to json_no_timestamp for "test" token and try again?

Re: Http Event Collector output not being indexed?

arun_kant_sharm — Tue, 25 Jun 2019 07:51:12 GMT

Actually I created the HEC input in a Index(Test) , so nothing is come in default index.

Re: Http Event Collector output not being indexed?

renjith_nair — Tue, 25 Jun 2019 08:01:54 GMT

Even for "All Time" time range?

Re: Http Event Collector output not being indexed?

arun_kant_sharm — Tue, 25 Jun 2019 08:05:37 GMT

Thanks, its working 🙂

Re: Http Event Collector output not being indexed?

harsmarvania57 — Tue, 25 Jun 2019 08:14:57 GMT

Great, I have converted my comment to answer so you can accept it.