About Stream

[beginne_Splunk]

The following procedures are used to build the system.
https://docs.splunk.com/Documentation/Splunk/latest/Data/FormateventsforHTTPEventCollector

I am trying the following command listed in Raw event parsing, but it returns "curl: (3) URL using bad/illegal format or missing URL".
In the "http-inputs-<customer>" section I have put "http-inputs-localhost:8088", is this wrong?
I know this is a rudimentary question, but please help.

curl https://http-inputs-<customer>.splunkcloud.com/services/collector/raw -H "X-Splunk-Request-Channel: FE0ECFAD-13D5-401B-847D-77833BD77131" -H "Authorization: Splunk BD274822-96AA-4DA6-90EC-18940FB2414C" -d '<raw data string>' -v

[richgalloway · Accepted solution]

"localhost" is not the name of your Splunk Cloud stack so that cannot be used to send HEC events to it.  If you connect to Splunk Cloud using the example URL of "example.splunkcloud.com" then your HEC URL is "https://http-inputs-example.splunkcloud.com:8088".  If you do not have a Splunk Cloud account then you cannot send HEC events to Splunk Cloud.