Getting Data In

Is there a way to validate the URI for HTTP Event Collector?

gauravmishra15
Path Finder

I am trying to leverage Powershell to POST the event in form of JSON. The Invoke-WebRequest does not work well. Is there a way to validate the URI for HTTP Event Collector to rule out the possibility of a wrong URI?

$Token = "B50D09B4-HG24-8N52-JN38-8h8ASD789998"
$URL = "https://localhost:8088/services/collector"
$Headers = @{"Authorization"=("Splunk " + $Token)}
$Body = '{"event" : "Hello !"}' | ConvertTo-Json

$Result = Invoke-WebRequest -URI $URL -Headers $Headers -Body $Body -Method POST -ContentType "Application/JSON"
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

What error do you get? Are you including $Token in the request?

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

What error do you get? Are you including $Token in the request?

---
If this reply helps you, Karma would be appreciated.

gauravmishra15
Path Finder

Great question! I've added Token as a session variable in my Invoke-WebRequest command, it is working now!

Here is the command for viewers' reference:

$Result = Invoke-WebRequest -URI $URL -Headers $Headers -Body $Body -Method POST -ContentType "Application/JSON" -SessionVariable "$Token"

Thank you Rich!

0 Karma
Get Updates on the Splunk Community!

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...