Splunk Cloud Platform

HTTP Event Collector: Unable to send data to the REST endpoint (Using Splunk Cloud Trial)

pranjals
New Member

Hi,

I am trying out Splunk Cloud for an integration with a third-party application using the HTTP Event Collector.

I have created the Token and made the required configurations. But I am unable to send any data to the HEC. I'm using POST to send data, to this endpoint:

https://input-prd-p-<redacted>.splunkcloud.com:8088/services/collector

I have noticed there is no Global Setting option available in the trial version. Could that be a reason?

Any information regarding is will be helpful. Thanks in advance.

Labels (2)
0 Karma

livehybrid
Builder

Have you checked this directly with something like CURL to check the connection and token?

curl -k "https://<yourHECAddress>.splunkcloud.com/services/collector/raw" \
-H "X-Splunk-Request-Channel: FE0ECFAD-13D5-401B-847D-77833BD77131"   -H "Authorization: Splunk <YOUR_TOKEN_HERE>" \
    -d '{"event": "Welcome to SplunkCloud", "sourcetype":"test"}'

Remove the  X-Splunk-Request-Channel if you arent using Acknowledgments.

Does this give any errors?

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud | Unified Identity - Now Available for Existing Splunk ...

Raise your hand if you’ve already forgotten your username or password when logging into an account. (We can’t ...

Index This | How many sides does a circle have?

February 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...