https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-from-an-external-source-machine/m-p/466760#M80431 <P>Thanks.One small confirmation.Can we send .csv files from a custom location on the remote server to splunk via HTTP tokens</P> Fri, 14 Feb 2020 14:30:41 GMT vrmandadi 2020-02-14T14:30:41Z https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-from-an-external-source-machine/m-p/466756#M80427 <P>What would be a way to get data from an external machine which is not part of our environment .Correct me if I am wrong .I was assuming to install UF on the external machine , create an HTTP token on a HF in our environment and give the token , URL and port details to get the data from the external machine .</P> <P>Is this the way to get data through external machine through HTTP token.The data in a custom path and the data is in csv format.</P> <P>Thanks in Advance </P> Thu, 13 Feb 2020 20:32:10 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-from-an-external-source-machine/m-p/466756#M80427 vrmandadi 2020-02-13T20:32:10Z https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-from-an-external-source-machine/m-p/466757#M80428 <P>The Universal Forwarder (UF) typically is the easiest way to get data into Splunk. The UF does not use HTTP tokens, however, It sends data directly to your indexers on port 9997 (by default). When you configure the UF, tell it to monitor the CSV file and send all output to your indexer(s).</P> <P>Of course, since the UF is not in your environment you first should ensure a UF will be allowed to connect to your indexers.</P> Thu, 13 Feb 2020 20:56:42 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-from-an-external-source-machine/m-p/466757#M80428 richgalloway 2020-02-13T20:56:42Z https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-from-an-external-source-machine/m-p/466758#M80429 <P>Is there way that we can send through the HTTP tokens?</P> Thu, 13 Feb 2020 21:07:06 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-from-an-external-source-machine/m-p/466758#M80429 vrmandadi 2020-02-13T21:07:06Z https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-from-an-external-source-machine/m-p/466759#M80430 <P>Yes. Write, acquire, or modify one of your existing programs to send data to the HTTP Event Collector (HEC) using a token for authentication. See <A href="https://docs.splunk.com/Documentation/SplunkCloud/8.0.2001/Data/Senddata">https://docs.splunk.com/Documentation/SplunkCloud/8.0.2001/Data/Senddata</A> for how to send data to HEC.</P> Fri, 14 Feb 2020 00:58:40 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-from-an-external-source-machine/m-p/466759#M80430 richgalloway 2020-02-14T00:58:40Z https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-from-an-external-source-machine/m-p/466760#M80431 <P>Thanks.One small confirmation.Can we send .csv files from a custom location on the remote server to splunk via HTTP tokens</P> Fri, 14 Feb 2020 14:30:41 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-from-an-external-source-machine/m-p/466760#M80431 vrmandadi 2020-02-14T14:30:41Z https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-from-an-external-source-machine/m-p/466761#M80432 <P>HTTP tokens are an authentication mechanism, not a transport mechanism.<BR /> If you can represent the CSV file in a form specified in the link above then it should work.</P> Sat, 15 Feb 2020 13:12:28 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-get-data-from-an-external-source-machine/m-p/466761#M80432 richgalloway 2020-02-15T13:12:28Z