Deployment Architecture

when i send multiple data in json format.I am getting error like this {"text":"No data","code":5}

arunprasath93
Explorer

my json data

            {"event":"edge log","target":"mnm"}


        </Payload>

my data is not logged in Http event collector.I am getting error like this {"text":"No data","code":5}

Tags (1)
0 Karma

sdchakraborty
Contributor

Hi,

"target":"mnm" is part of your event? then you need to put it inside "event". something like below,

curl -k http://localhost:8088/services/collector -H "Authorization:Splunk d4661317-2829-48c5-a1c6-e3aa2ff5f792" -d "{"sourcetype": "_json","event": {"a": "value1", "b": ["value1_1", "value1_2"]}}"

Sid

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...