- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How to get HTTP Event Collectors enabled in Splunk Cloud?
![jimathead jimathead](https://community.splunk.com/legacyfs/online/avatars/346233.jpg)
We are investigating Splunk Cloud for our browser apps performance and logging. To see if the HTTP Event Collectors would meet our needs, I created a trial account. When going through the set-up instructions, I read this line:
Note: To turn on HTTP Event Collector in Splunk Cloud, file a request ticket with Splunk Support.
It seems that with a trial account, the web UI will not let me file a request ticket with Splunk. If it is possible to do so, I certainly cannot figure out HOW I would do that.
Can I get the HTTP Event Collectors enabled on my Splunk Cloud trial? Who should I contact and how. If this is not possible, please let me know and I will simply delete my trial account.
Thank you.
Jim
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
So the secret is the url needs an input prefix.
See here: https://answers.splunk.com/answers/488523/what-is-the-correct-url-to-set-up-http-event-colle.html#an...
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
![wfrankl2 wfrankl2](https://community.splunk.com/legacyfs/online/avatars/367270.jpg)
I have had Support open a ticket and it is fairly painless besides waiting on them to do it. We were able to send data immediately. The docs didn't used to tell you to open a ticket. We tried to create ourselves, but as mentioned before, there is the bug that it doesn't create the collector on the indexer so it won't work. That's why they have to create it. Not sure if that is fixed in 6.5, we are 6.4.1.2.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
![Splunk Employee Splunk Employee](/html/@F88B7774A2BF2E9108D79A067A92A581/rank_icons/employee-16.png)
For self-service you still have to go into the HTTP Event Collector management UI and enable it. You can do this yourself.
For clustered you will need to work with support for enabling and for token management.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This can all be done by going to settings>Data Inputs>Add new
- Fill in Name then click next.
- Select index appropriate for your data (you can create a new index here if need be and choose that)
- Review to make sure everything is as it should be
- Copy down your Token
Next you will be ready to start sending your Data using the Http Event Collector
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
![ChrisG ChrisG](https://community.splunk.com/legacyfs/online/avatars/97824.jpg)
![Splunk Employee Splunk Employee](/html/@F88B7774A2BF2E9108D79A067A92A581/rank_icons/employee-16.png)
If you have a self-service Splunk Cloud account, HTTP Event Collector is available by default. If you have a managed Splunk Cloud account, you need to file a support ticket to have HTTP Event Collector enabled.
See Add data using HTTP Event Collector in the Splunk Cloud User Manual.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
![starcher starcher](https://community.splunk.com/legacyfs/online/avatars/147198.jpg)
They mentioned at conf that the Web UI was not updated yet for it. It will require a support ticket. One of the Splunk folks will have to reply on how to open a ticket for a trial account.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
![Splunk Employee Splunk Employee](/html/@F88B7774A2BF2E9108D79A067A92A581/rank_icons/employee-16.png)
Hi @jimathead
You can now enable HTTP Event Collector now in trial via the Splunk UI.
There is a known issue with the cert we use for cloud trial, so depending on which stack you are using to send the data, you might hit into issues, or you might not.
curl definitely will work.
![](/skins/images/53C7C94B4DD15F7CACC6D77B9B4D55BF/responsive_peak/images/icon_anonymous_message.png)