Getting Data In

Getting error "Couldn't request server info: Couldn't complete HTTP request: Connection refused"

Ka21
Loves-to-Learn

While creating HEC token through putty by using below command, we are getting error like "Couldn't request server info: Couldn't complete HTTP request: Connection refused".  Please provide any info or solution.


/opt/splunk/bin/splunk http-event-collector create Appd_Splunk -uri http://<IP>:8089 -description "This is a Appd token" -disabled 1 -index toll_alrt

Labels (1)
0 Karma

Richfez
SplunkTrust
SplunkTrust

Did you enable HEC?  https://docs.splunk.com/Documentation/Splunk/9.1.3/Data/UseHECfromtheCLI says it's something like

 

splunk http-event-collector enable -uri https://localhost:8089

 

(It's unclear from the docs if enabling a specific token enabled the global HEC settings or not, but this definitely will do that)

 

0 Karma
Get Updates on the Splunk Community!

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...