Getting Data In

Splunk http event collector for IOT

mrishabh117
New Member

Hi All,

I am looking for MQTT integration with splunk enterprise. I tried MQTT modular input but its very unstable sometime it works and sometime it dont.

can anybody suggest me some other alternative where I can pull out IOT-Device info or values into splunk instance

I have got advantech IOT devices and I am trying to get analog data into splunk in json format.!

Thanks.!

Rishabh

0 Karma

fsudmann
Explorer

I have, quite extensively, used HTTP Event Collector to get IoT data into Splunk. Many IoT services will allow you to set up an API connection. If the service can do HTTP POST, then no problem, just point it at <your-splunk-instance>:8088/services/collector/raw with header "Authorization: Splunk <token>".

If the service requires HTTP GET, you could use this REST API addon from Splunkbase (https://splunkbase.splunk.com/app/1546/), or you could build your own with addon-builder (https://splunkbase.splunk.com/app/2962/), or you can do what I usually do, which is to set up a logic app in Azure, to handle all the API calls. (https://docs.microsoft.com/en-us/azure/logic-apps/

Anyways, getting IoT data into Splunk should be easy.

0 Karma
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...