Getting Data In

Collectd dosent send data to splunk

Path Finder

Hello Splunkers ,

I install collectd in the same server when i install splunk , i want to get the system data from this server
the collectd service is active but i can't see any data in splunk ,

this is the configuration under collectd.conf :

LoadPlugin write_http

URL "https://X.X.X.X:8088/services/collector/raw?channel=bfd29681-2722-48c7-8495-05f492dd2bce"
Header "Authorization: Splunk bfd29681-2722-48c7-8495-05f492dd2bce"
Format "JSON"
Metrics true
StoreRates true

server "X.X.X.X"
port "8088"
token "bfd29681-2722-48c7-8495-05f492dd2bce"
ssl false
verifyssl false

Any help please ?

0 Karma


have you used http event collector?

Splunk Employee
Splunk Employee

you can also check /etc/collectd.log or your os equivalent path to see what the issue is.

I recommend using the easy installer that comes with Splunk app for infrastructure!

- MattyMo
0 Karma

Path Finder

Thank you @mmodestino_splunk it's very helpfull

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud | Customer Survey!

If you use Splunk Observability Cloud, we invite you to share your valuable insights with us through a brief ...

.conf23 | Get Your Cybersecurity Defense Analyst Certification in Vegas

We’re excited to announce a new Splunk certification exam being released at .conf23! If you’re going to Las ...

Starting With Observability: OpenTelemetry Best Practices

Tech Talk Starting With Observability: OpenTelemetry Best Practices Tuesday, October 17, 2023   |  11AM PST / ...