Getting Data In

How can I ask HTTP/HTTPS GET request to REST and output response to Splunk?

Loves-to-Learn

I use Splunk Cloud so I can't use Splunk REST API Modular Input. On my instance I'm not able to browse REST in data inputs.
Is any option to deal with outside REST data?
Would you be so kind to answer me?

Szymon

Tags (3)
0 Karma

SplunkTrust
SplunkTrust

For that you should use the HTTP Event Collector (HEC).

It’s basically REST inputs with pre shared keys.

http://docs.splunk.com/Documentation/Splunk/7.1.2/Data/UsetheHTTPEventCollector

0 Karma

Splunk Employee
Splunk Employee

Currently, the best way to do this is with a Splunk Heavy Forwarder. The HF can be at your site or in any Cloud provider (AWS, Azure, etc.) then push the data to your SplunkCloud instance.

0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes
and swag!