Building for the Splunk Platform

Is there a way to change the token prefix from splunk to bearer?

nareshkumarg
Path Finder

Hi All,

We are trying to push data from Grafana to Splunk using HEC based integration. When we did the testing we found that the header sent by Grafana was in the following format "Bearer <HEC TOKEN>" instead of "splunk <HEC TOKEN>" format.

Because of this, authentication failed and we cannot ingest data into Splunk. We manually tried the same via postman where we have an option to change the Bearer prefix and it worked. Our ask is, do we have a method to change the Header Authorization from Splunk to Bearer to fix the authentication issue?

Please help.

Regards,

Naresh

Labels (3)
0 Karma
1 Solution

thambisetty
Super Champion

thambisetty
Super Champion

May be useful.

https://community.splunk.com/t5/Getting-Data-In/Posting-data-to-HTTP-Event-Collector-HEC-without-pas...

————————————
If this helps, give a like below.
Get Updates on the Splunk Community!

This Week's Community Digest - Splunk Community Happenings [9.26.22]

Get the latest news and updates from the Splunk Community here! Upcoming User Group Events! &#x1f44f; Check ...

BSides Splunk 2022 - The Call for Papers is now Open!

TLDR; Main Site: https://bsidessplunk.com CFP Site: https://bsidessplunk.com/cfp CFP Opens: December 15th, ...

Sending Metrics to Splunk Enterprise With the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...