I am trying to use Splunk's HEC to ingest data. I noticed that the HEC tokens' statuses are disabled. How can I enable this to use HEC?
Also, I don't see an option to enable HEC.
I am using Splunk Free on Splunk Cloud. I don't have a license and I didn't download anything.
You will be very limited on a free license as the free cloud license only lasts 15 days. You would normally have a HEC creation button but with free this wont be available. Your best speaking to Splunk directly or downloading the enterprise version to run locally.
I have same problem.
Documents say use 'Global Settings' on HEC page. But, on Splunk Cloud there is not Global Settings button next to New Token.
No support on trial, so can't access Splunk support.
Seems like a pretty serious limitation since you can also not send syslog traffic to splunk cloud.
Anyway to get HEC token enabled on Splunk Coud trial?