AppD Archive

HTTP Request Data Collector

CommunityUser
Splunk Employee
Splunk Employee

I am trying to collect data for a given http POST request, I am chhosing "ALL *" in my data collector setup.
When viewing data collectors for that business transaction, I am not able to find request body/payload, is there a way for HTTP data collector to collect request payload? Or I am missing something!

Thanks,

Hossam

Ashish_Singh
Communicator

Hi,

Whenever you are creating the Http Request Data Collector, you need to give the specifc HTTP Parameters as (display name and Parameter Name).eg: display name could be arrayDisplayName and Parameter Name could be array.

you can also collect the cokkies value etc as per you requirements.

if you want to collect the data related to the parameter of your method, then you can crete the MIDC (method invocation data collector) on your class and method.

Thanks,

Ashish.

0 Karma

CommunityUser
Splunk Employee
Splunk Employee

I don't know what should I use as a paramter name to get post request payload, considering below HTTP POST request: 

POST http://acme.local.com/api/employees HTTP/1.1
Host: acme.local.com
Content-Length: 59
content-type: application/xml

<Employee>
<Name>name</Name>
<ID>1</ID>
</Employee>

Employee is the request body that I am trying to collect, should I add an http parameter name of type Employee? what if I that request body is changing, should I update my data collector any time the name change?  

I thought having ALL as parameter name would collect all http request parameters, including request body, isn't it the case?

Thanks!

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud’s AI Assistant in Action Series: Analyzing and ...

This is the second post in our Splunk Observability Cloud’s AI Assistant in Action series, in which we look at ...

Elevate Your Organization with Splunk’s Next Platform Evolution

 Thursday, July 10, 2025  |  11AM PDT / 2PM EDT Whether you're managing complex deployments or looking to ...

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...