How do I view events in an index?

[stevenchamales]

Hi,

I just installed Splunk and got my HEC working. I want to view the individual events that I have passed into the HEC. Is that possible?

Thanks!

-s.

[martin_mueller]

Search for index=that_index.

[jkat54]

If you didn’t specify an index when you configured the HEC input, then try index=main

[ipteam]

You can try index=* to see which indexes you have any log. After that use index=selected_one