Has there been any changes to the HEC since its initial release in 2015 as part of Splunk 6.3? If so, are there any release notes around this Splunk functionality between version?
Yes, there have been some notable changes including the addition of Basic authentication and "raw" parsing where you don't have to send JSON. This page details the new features:
http://dev.splunk.com/view/event-collector/SP-CAAAE8Y
Yes, there have been some notable changes including the addition of Basic authentication and "raw" parsing where you don't have to send JSON. This page details the new features:
http://dev.splunk.com/view/event-collector/SP-CAAAE8Y
@jtacy Thank you very much for the info!