I am trying to test Scripted Input according to steps mentioned here -
docs splunk com /Documentation/SplunkCloud/8.0.2004/Data/Getdatafromscriptedinputs
The problem is that trial instance only shows HTTP Event Collector
What am I doing wrong? Or am I expecting something that Trial instance doesn't provide?
Thanks in advance!
Splunk Cloud does not support scripted inputs. To use scripted inputs, you must define them in an on-prem heavy forwarder.
There's an exception for inputs from cloud-based sources, but I'm not sure the trial version supports IDM (Inputs Data Manager).
Splunk Cloud does not support scripted inputs. To use scripted inputs, you must define them in an on-prem heavy forwarder.
There's an exception for inputs from cloud-based sources, but I'm not sure the trial version supports IDM (Inputs Data Manager).
Thanks @richgalloway for the quick response! Just one follow-up question -
Is there any alternate way to index response from REST API?
One approach I see is with Splunk Enterprise + REST API Modular Input kind of solution
https://splunkbase.splunk.com/app/1546/#/overview
I am reasonably new to Splunk so if my question is not well-formed apologies in advance.
Modular inputs and scripted inputs are fraternal twins. Both require heavy forwarders to work with Splunk Cloud.
Thanks again. This helped a lot!