Getting Data In

curl: (6) Could not resolve host: http-inputs-<stack_url>.splunkcloud.com

NZenitram
Explorer

I cannot get auth to work for the HTTP Input in the Splunk trial.

curl -H "Authorization: Splunk <HEC_token>" -k https://http-inputs-<stack_url>.splunkcloud.com:8088/services/collector/event -d '{"sourcetype": "my_sample_data", "event": "http auth ftw!"}'

My Splunk URL in https://<stack_url>.splunkcloud.com

I've scoured the forums and web trying a number of combinations here. The HTTP Input is in the Enabled state on the Splunk console.

Any help is appreciated.

Thank you

 

 

Labels (1)
0 Karma
1 Solution

NZenitram
Explorer

I understand its not an auth issue. The error is very clear that it cannot resolve host. The question pertains to the host/dns entry.

Thank you

View solution in original post

0 Karma

NZenitram
Explorer

I think this endpoint just took some time to deploy. Its working as expected now.

0 Karma

PickleRick
SplunkTrust
SplunkTrust

This is _not_ a problem with authentication.

This means that the host you're trying to run your curl command on cannot resolve the name you've provided as the host for the HEC endpoint. Whether it's that you've provided a wrong name or is it because you have problems with your network setup - that we don't know.

BTW, trial Splunk Cloud instances don't use TLS on HEC inputs as far as I remember.

0 Karma

NZenitram
Explorer

I understand its not an auth issue. The error is very clear that it cannot resolve host. The question pertains to the host/dns entry.

Thank you

0 Karma
Get Updates on the Splunk Community!

Learn Splunk Insider Insights, Do More With Gen AI, & Find 20+ New Use Cases You Can ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Buttercup Games: Further Dashboarding Techniques (Part 7)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...