All Apps and Add-ons

Cisco Meraki Presence Modular Input

swatson
New Member

We are running Splunk Cloud, and the Cloud operations team created a HTTP Event Collector with a new token. On the Meraki dashboard, I enter the URL from Splunk Cloud (https://http-inputs-oxfordinc.splunkcloud.com/services/collector/event) and I enter the HEC "token" as the Meraki secret. It won't validate, giving a response other than 200 message.

My guess is this is an issue that the Meraki "secret" and "validator" are not tied to the HEC token in any way, but I can't find any details on how this is supposed to be accomplished. Any help is appreciated.

0 Karma

swatson
New Member

I think I understand part of the issue now. The Meraki_TA isn't working in our Splunk Cloud instance, even though it is supposedly supported. Thanks!

0 Karma

Damien_Dallimor
Ultra Champion

HEC has absolutely nothing to do with the Cisco Meraki Setup.

Validator and Secret can be obtained from your Meraki admin.

Cisco Meraki Docs

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...