Getting Data In
Highlighted

Why is My Splunk 7.0.2 Install Missing HTTP Event Collector Option?

Explorer

I would like to setup HEC but do not see the option under Settings -> Data Inputs. What do I have to do to enable HEC? The server I am trying to configure this on is the indexer, not clustered but set up to do a distributed search.

0 Karma
Highlighted

Re: Why is My Splunk 7.0.2 Install Missing HTTP Event Collector Option?

Path Finder

I see it in mine. Do you have the "splunk_httpinput" app in etc/apps?

0 Karma
Highlighted

Re: Why is My Splunk 7.0.2 Install Missing HTTP Event Collector Option?

Explorer

Yes it is there. Here is what is in the inputs.conf:

[http]
disabled=1
port=8088
enableSSL=1
dedicatedIoThreads=2
maxThreads = 0
maxSockets = 0
useDeploymentServer=0

ssl settings are similar to mgmt server

sslVersions=*,-ssl2
allowSslCompression=true
allowSslRenegotiation=true

NOTE: Disabled was set to 0, I changed to 1 but made no difference.

0 Karma
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.