Installation

HEC not working for Spunk Cloud

raomu
Explorer

Hello,

I have a test python script below. The script doesn't show-up any error and runs fine but doesn't send any data from TEST.csv file to indexer.

Script:

import csv
import json
import requests

filename="TEST1.csv"
head={"Authorization":"Splunk XXXXXXXXXXXXXXXXXXXXXXXXXXX", "Content-Type": "application/json"}
url="https://dnb.splunkcloud.com:443/services/collector/event"

with open(filename, 'r') as csvfile:
csvreader = csv.DictReader(csvfile)
for row in csvreader:
data={"index": "hcctest", "sourcetype": "devicecollection", "event": row}
r = requests.post(url, data=json.dumps(data), headers=head)

Tags (1)
0 Karma

p_gurav
Champion

Hi,

TEST.csv or TEST1.csv?

0 Karma

raomu
Explorer

thanks for your reply. This issue is fix. We had some issue with the HEC token.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI! Discover how Splunk’s agentic AI ...

[Puzzles] Solve, Learn, Repeat: Dereferencing XML to Fixed-length events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Stay Connected: Your Guide to December Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...