Getting Data In

Why is my HTTP Event Collector curl successful, but it returns no data in Splunk?



I am testing a simple HTTP Event Collector input:

$ curl -k "https://localhost:8088/services/collector" -H "Authorization: Splunk xxxxxxxxxxxxxxxxxxxxxxxxxx" -
d '{"event": "andfnadjf"}'

It returns success but data is not getting into the default index (actually into any index)

Returns: {"text":"Success","code":0}

Any ideas?

Splunk Employee
Splunk Employee

Can you post your config file?

0 Karma

New Member

I am also facing the similar issue. @TiagoTLD1 have you got answer to this?

0 Karma