Getting Data In

Splunk http event collector for IOT

mrishabh117
New Member

Hi All,

I am looking for MQTT integration with splunk enterprise. I tried MQTT modular input but its very unstable sometime it works and sometime it dont.

can anybody suggest me some other alternative where I can pull out IOT-Device info or values into splunk instance

I have got advantech IOT devices and I am trying to get analog data into splunk in json format.!

Thanks.!

Rishabh

0 Karma

fsudmann
Explorer

I have, quite extensively, used HTTP Event Collector to get IoT data into Splunk. Many IoT services will allow you to set up an API connection. If the service can do HTTP POST, then no problem, just point it at <your-splunk-instance>:8088/services/collector/raw with header "Authorization: Splunk <token>".

If the service requires HTTP GET, you could use this REST API addon from Splunkbase (https://splunkbase.splunk.com/app/1546/), or you could build your own with addon-builder (https://splunkbase.splunk.com/app/2962/), or you can do what I usually do, which is to set up a logic app in Azure, to handle all the API calls. (https://docs.microsoft.com/en-us/azure/logic-apps/

Anyways, getting IoT data into Splunk should be easy.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...