Splunk Cloud Platform

Enable http event collector

eltnegcoinprofi
Explorer

How can I use the HTTP event collector in Splunk cloud 15 days trial? Also, will my instance be disabled after the trial?

 

I followed the instructions here but I got {"text": "Data channel is missing", "code":10} and  Could not resolve host: when I tried the URLs `https://http-inputs-prd-p-xxxxx.splunkcloud.com:443/services/collector/event` and https://prd-p-xxxxx.splunkcloud.com:8088/services/collector/event respectively.

Labels (1)
Tags (1)
0 Karma
1 Solution

livehybrid
Builder

The first request sounds almost right, but the token has Acknowledgement turned on so need to either turn that off or add a request channel (In curl this would be something like 

-H "X-Splunk-Request-Channel: FE0ECFAD-13D5-401B-847D-77883AD77131"

 

 

View solution in original post

livehybrid
Builder

The first request sounds almost right, but the token has Acknowledgement turned on so need to either turn that off or add a request channel (In curl this would be something like 

-H "X-Splunk-Request-Channel: FE0ECFAD-13D5-401B-847D-77883AD77131"

 

 

eltnegcoinprofi
Explorer

Thanks. Logging now works as expected. What happens when my trial period elapses? Does my instance get erased or will I have reduced logging functionalities?

0 Karma

livehybrid
Builder

Unfortunately I think you will lose access to it. It may be worth speaking to the sales team to see if it can be extended?

Glad its working!

0 Karma

eltnegcoinprofi
Explorer

Thanks.🙂

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...