Getting Data In

Cannot connect to HEC on cloud

pjasiak
Engager

Hi, I'm running the curl command:

 

curl -vvvvv https://prd-p-xxxxx.splunkcloud.com:8088/services/collector/event -H "Authorization: Splunk <token>" -d '{"sourcetype": "my_sample_data", "event": "ping"}'

 

and I got:
* Trying <IP>:8088...
* connect to <IP> port 8088 failed: Operation timed out
* Failed to connect to prd-p-xxxxx.splunkcloud.com port 8088 after 17497 ms: Couldn't connect to server
* Closing connection 0
curl: (28) Failed to connect to prd-p-xxxxx.splunkcloud.com port 8088 after 17497 ms: Couldn't connect to server

I have free trial, HEC is enabled and token is valid
what could cause this problem?

Labels (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

Also remember that trial Cloud installation does not fully support HEC over TLS. I don't remember the details though - either you get only unencrypted connection or get the TLS-enabled port but only with some self-signed cert on the server's side.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Check your firewalls to confirm they allow connections to Splunk Cloud port 8088.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...