Getting Data In

How to enable status of tokens using HTTP Event Collector (HEC) on Splunk Cloud trial version?

mjunglw
Engager

I am trying to use Splunk's HEC to ingest data. I noticed that the HEC tokens' statuses are disabled. How can I enable this to use HEC?

Also, I don't see an option to enable HEC.

I am using Splunk Free on Splunk Cloud. I don't have a license and I didn't download anything.

alt text
alt text

Labels (1)
0 Karma
1 Solution

Sfry1981
Communicator

Hi @mjunglw

You will be very limited on a free license as the free cloud license only lasts 15 days. You would normally have a HEC creation button but with free this wont be available. Your best speaking to Splunk directly or downloading the enterprise version to run locally.

View solution in original post

0 Karma

danfox4488
New Member

I have same problem.
Documents say use 'Global Settings' on HEC page. But, on Splunk Cloud there is not Global Settings button next to New Token.

No support on trial, so can't access Splunk support.

Seems like a pretty serious limitation since you can also not send syslog traffic to splunk cloud.

Anyway to get HEC token enabled on Splunk Coud trial?

0 Karma

Sfry1981
Communicator

Hi @mjunglw

You will be very limited on a free license as the free cloud license only lasts 15 days. You would normally have a HEC creation button but with free this wont be available. Your best speaking to Splunk directly or downloading the enterprise version to run locally.

0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...