Getting Data In

HTTP Event Collector supports compression (like Gzip)?

Engager

Is compression (like Gzip) supported in HEC batched payload ? One of the Splunk blog mentioned it, but can't find any relevant info in user/developer guide. Can someone please confirm and share docs if supported?

1 Solution

Splunk Employee
Splunk Employee

Revised answer: If you send gzip'ed data, just set the Content-Encoding header like you would with any other payload sent over HTTP and it will work.

View solution in original post

Splunk Employee
Splunk Employee
0 Karma

Splunk Employee
Splunk Employee

Revised answer: If you send gzip'ed data, just set the Content-Encoding header like you would with any other payload sent over HTTP and it will work.

View solution in original post

State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!