Getting Data In

HTTP Event Collector supports compression (like Gzip)?

sandeep23
Engager

Is compression (like Gzip) supported in HEC batched payload ? One of the Splunk blog mentioned it, but can't find any relevant info in user/developer guide. Can someone please confirm and share docs if supported?

1 Solution

s2_splunk
Splunk Employee
Splunk Employee

Revised answer: If you send gzip'ed data, just set the Content-Encoding header like you would with any other payload sent over HTTP and it will work.

View solution in original post

amiracle
Splunk Employee
Splunk Employee
0 Karma

s2_splunk
Splunk Employee
Splunk Employee

Revised answer: If you send gzip'ed data, just set the Content-Encoding header like you would with any other payload sent over HTTP and it will work.

Get Updates on the Splunk Community!

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...

Splunkbase | Splunk Dashboard Examples App for SimpleXML End of Life

The Splunk Dashboard Examples App for SimpleXML will reach end of support on Dec 19, 2024, after which no new ...

Understanding Generative AI Techniques and Their Application in Cybersecurity

Watch On-Demand Artificial intelligence is the talk of the town nowadays, with industries of all kinds ...