Getting Data In

6.3 Upgrade - Missing HTTP Event Collector Data Input Option

photuris
Explorer

I just upgraded a local install of Splunk Enterprise from 6.2.4 (iirc) to 6.3. Restarted it, etc.

I'm not seeing the option to enable HTTP Event Collector in Settings -> Data Inputs. Although I was able to create a token in Data Inputs.

I could simply uninstall completely and reinstall, but I was hoping to not have to do that, as I have stuff in development. Is there an easy way to get this option to show up?

Ubuntu, 64-bit.

Thanks!

gblock_splunk
Splunk Employee
Splunk Employee

@photuris the inputs.conf you should be looking for is in etc/apps/splunk_httpinput. Can you tell me if that app exists? If so, can you send me a copy of it? gblock@splunk.com

0 Karma

gblock_splunk
Splunk Employee
Splunk Employee

@photuris how did you create the token if you did not see the HTTP Event Collector screen under inputs?

Can you email me gblock@splunk.com so we can get to the bottom of this?

Thanks
Glenn

0 Karma

athorat
Communicator

Hi

I have a similar issue. I do not see HTTP Event Collector, under data inputs.

/opt/splunk/etc/apps/splunk_httpinput/default

inputs.conf

$ more inputs.conf
[http]
disabled=1
port=8088
enableSSL=1
dedicatedIoThreads=2
maxThreads = 0
maxSockets = 0
useDeploymentServer=0

I have the same version in non prod but the only difference is, prod is a search head clsuster and non prod has only one search head.
It is available in non prod, the file contents of inputs.conf are the same.

What Needs to be modified in inputs.conf.

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...