Splunk Cloud Platform

HTTP Event Collector: Unable to send data to the REST endpoint (Using Splunk Cloud Trial)

pranjals
New Member

Hi,

I am trying out Splunk Cloud for an integration with a third-party application using the HTTP Event Collector.

I have created the Token and made the required configurations. But I am unable to send any data to the HEC. I'm using POST to send data, to this endpoint:

https://input-prd-p-<redacted>.splunkcloud.com:8088/services/collector

I have noticed there is no Global Setting option available in the trial version. Could that be a reason?

Any information regarding is will be helpful. Thanks in advance.

Labels (2)
0 Karma

livehybrid
Builder

Have you checked this directly with something like CURL to check the connection and token?

curl -k "https://<yourHECAddress>.splunkcloud.com/services/collector/raw" \
-H "X-Splunk-Request-Channel: FE0ECFAD-13D5-401B-847D-77833BD77131"   -H "Authorization: Splunk <YOUR_TOKEN_HERE>" \
    -d '{"event": "Welcome to SplunkCloud", "sourcetype":"test"}'

Remove the  X-Splunk-Request-Channel if you arent using Acknowledgments.

Does this give any errors?

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...