Getting Data In

Why is my HTTP Event Collector curl successful, but it returns no data in Splunk?

TiagoTLD1
Communicator

Hello,

I am testing a simple HTTP Event Collector input:

$ curl -k "https://localhost:8088/services/collector" -H "Authorization: Splunk xxxxxxxxxxxxxxxxxxxxxxxxxx" -
d '{"event": "andfnadjf"}'

It returns success but data is not getting into the default index (actually into any index)

Returns: {"text":"Success","code":0}

Any ideas?

esix_splunk
Splunk Employee
Splunk Employee

Can you post your config file?

0 Karma

chetanamumbaika
New Member

I am also facing the similar issue. @TiagoTLD1 have you got answer to this?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...