Getting Data In

Why is my HTTP Event Collector curl successful, but it returns no data in Splunk?

TiagoTLD1
Communicator

Hello,

I am testing a simple HTTP Event Collector input:

$ curl -k "https://localhost:8088/services/collector" -H "Authorization: Splunk xxxxxxxxxxxxxxxxxxxxxxxxxx" -
d '{"event": "andfnadjf"}'

It returns success but data is not getting into the default index (actually into any index)

Returns: {"text":"Success","code":0}

Any ideas?

esix_splunk
Splunk Employee
Splunk Employee

Can you post your config file?

0 Karma

chetanamumbaika
New Member

I am also facing the similar issue. @TiagoTLD1 have you got answer to this?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Rounding off the Splunk Dashboard Contest

What does a contest-winning Splunk dashboard look like? In this case, it isn't in a browser tab at all. It ...

A Four Part Event Series: AI + Observability: AI Agents, LLMs, Apps, & Infrastructure

AI + Observability: AI Agents, LLMs, Apps, & Infrastructure The rapid evolution of artificial intelligence ...