Getting Data In

Getting error "Couldn't request server info: Couldn't complete HTTP request: Connection refused"

Ka21
Loves-to-Learn

While creating HEC token through putty by using below command, we are getting error like "Couldn't request server info: Couldn't complete HTTP request: Connection refused".  Please provide any info or solution.


/opt/splunk/bin/splunk http-event-collector create Appd_Splunk -uri http://<IP>:8089 -description "This is a Appd token" -disabled 1 -index toll_alrt

Labels (1)
0 Karma

Richfez
SplunkTrust
SplunkTrust

Did you enable HEC?  https://docs.splunk.com/Documentation/Splunk/9.1.3/Data/UseHECfromtheCLI says it's something like

 

splunk http-event-collector enable -uri https://localhost:8089

 

(It's unclear from the docs if enabling a specific token enabled the global HEC settings or not, but this definitely will do that)

 

0 Karma
Get Updates on the Splunk Community!

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...