Getting Data In

Splunk Cloud Trial only shows 'HTTP Event Collector' as Data Input option

bluperfsplunkpo
Explorer

I am trying to test Scripted Input according to steps mentioned here -
docs splunk com /Documentation/SplunkCloud/8.0.2004/Data/Getdatafromscriptedinputs

The problem is that trial instance only shows HTTP Event Collector
alt text

What am I doing wrong? Or am I expecting something that Trial instance doesn't provide?

Thanks in advance!

Labels (1)
Tags (2)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Splunk Cloud does not support scripted inputs. To use scripted inputs, you must define them in an on-prem heavy forwarder.
There's an exception for inputs from cloud-based sources, but I'm not sure the trial version supports IDM (Inputs Data Manager).

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

Splunk Cloud does not support scripted inputs. To use scripted inputs, you must define them in an on-prem heavy forwarder.
There's an exception for inputs from cloud-based sources, but I'm not sure the trial version supports IDM (Inputs Data Manager).

---
If this reply helps you, Karma would be appreciated.

bluperfsplunkpo
Explorer

Thanks @richgalloway for the quick response! Just one follow-up question -

Is there any alternate way to index response from REST API?

One approach I see is with Splunk Enterprise + REST API Modular Input kind of solution
https://splunkbase.splunk.com/app/1546/#/overview

I am reasonably new to Splunk so if my question is not well-formed apologies in advance.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Modular inputs and scripted inputs are fraternal twins. Both require heavy forwarders to work with Splunk Cloud.

---
If this reply helps you, Karma would be appreciated.

bluperfsplunkpo
Explorer

Thanks again. This helped a lot!

0 Karma
Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...