Getting Data In

How to enable status of tokens using HTTP Event Collector (HEC) on Splunk Cloud trial version?

mjunglw
Engager

I am trying to use Splunk's HEC to ingest data. I noticed that the HEC tokens' statuses are disabled. How can I enable this to use HEC?

Also, I don't see an option to enable HEC.

I am using Splunk Free on Splunk Cloud. I don't have a license and I didn't download anything.

alt text
alt text

Labels (1)
0 Karma
1 Solution

Sfry1981
Communicator

Hi @mjunglw

You will be very limited on a free license as the free cloud license only lasts 15 days. You would normally have a HEC creation button but with free this wont be available. Your best speaking to Splunk directly or downloading the enterprise version to run locally.

View solution in original post

0 Karma

danfox4488
New Member

I have same problem.
Documents say use 'Global Settings' on HEC page. But, on Splunk Cloud there is not Global Settings button next to New Token.

No support on trial, so can't access Splunk support.

Seems like a pretty serious limitation since you can also not send syslog traffic to splunk cloud.

Anyway to get HEC token enabled on Splunk Coud trial?

0 Karma

Sfry1981
Communicator

Hi @mjunglw

You will be very limited on a free license as the free cloud license only lasts 15 days. You would normally have a HEC creation button but with free this wont be available. Your best speaking to Splunk directly or downloading the enterprise version to run locally.

0 Karma
Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...