Getting Data In

Why is setting up a demo Splunk service on a Digital Ocean Ubuntu server not working?

JosIJntema
Explorer

Hi there,

I am trying to setup a demo Splunk service on a Digital Ocean Ubuntu server.

http://:8080/services/collector/event

I am trying to reach the above URL, but it is not working somehow. I can get to the :8000 port and log in Splunk. Also, I am able to setup the HTTP Event Collector and have enabled everything.

I already set this up on localhost and that is working.

What am I doing wrong? Do I have to do some configuration on the Ubuntu server?

Thanks!

0 Karma
1 Solution

JosIJntema
Explorer

I have figured it out. I had use SSL configured, but I did not use https. Now when I do not tick off use SSL I am able to receive the events.

View solution in original post

0 Karma

JosIJntema
Explorer

I have figured it out. I had use SSL configured, but I did not use https. Now when I do not tick off use SSL I am able to receive the events.

0 Karma

starcher
SplunkTrust
SplunkTrust

It is typical to put HEC on 8088. But if you used 8080 have you confirmed you don't have iptables or other firewall configuration blocking it? You can use something like this to list the certificate if the port is reachable. Run again from another system replacing localhost with the servername/ip as appropriate too if localhost works.

openssl s_client -connect localhost:8088 -showcerts
0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...