HTTP Event Collector- Is there something wrong with this curl command?

[andrew15]

Currently trying to test an HTTP event collector token by directly sending events to the cloud before we use the HEC for a OpenTelemetry Connector, but we are getting stuck at 403 Forbidden error. I can see the successful request going through our firewall. Is there something wrong with this curl command? 

Not sure if it affects anything but we are still on the Splunk Cloud Classic, not Victoria. 

Screenshots attached, appreciate any help we can get!

andrew15_1-1684954283713.png

andrew15_2-1684954360716.png

[rnowitzki]

Hi @andrew15 ,

Are you sure about the port (443)?  Usually it's 8088, I guess also for Splunk Cloud (Classic).
There are some Examples in the Docs.

Ralph