All Apps and Add-ons

Streaming data from local HEC to Splunk Cloud

rasikmhetre
Explorer

I have successfully implemented this thing in my personal account and it works fine with the local HEC -> splunk cloud,  but in my organization's environment local HEC gives a successful response code but the indexer fails to index the data because HEC couldn't send data to Splunk cloud indexers. 

 

I noticed that I am not able to connect to the indexer's domain name or IP address on port 9997 do I need to explicitly allow any rule from Splunk cloud for indexers?

Labels (1)
Tags (1)
0 Karma

rasikmhetre
Explorer

Thanks for your reply @inventsekar 

did you use the private IP or public IP? - it's public. 

I replicated the same thing in my personal account and it worked perfectly fine. I have already raised a support case but thought of posting on the community for a faster answer.

0 Karma

inventsekar
SplunkTrust
SplunkTrust

Hi @rasikmhetre ... You should be able to contact the Splunk Cloud Support and they should help you on almost all support related issues. 

 

> I noticed that I am not able to connect to the indexer's domain name or IP address on port 9997 do I need to explicitly allow any rule from Splunk cloud for indexers?

did you use the private ip or public ip?.. You could check with the Splunk Cloud Support for this task as well. 

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma
Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...