Splunk Cloud Platform

How to resolve an error sending events to a custom index?

msilva
Path Finder

Hi,

We have created a custom events index 'abcde' in Splunk Enterprise, but sending data to it with cURL always fail. If the index is 'main', it works fine.

Could you please investigate this issue?

Kind regards,

 

Moacir

Labels (2)
0 Karma
1 Solution

msilva
Path Finder

Hi,

I have forgotten to add it to "Select Allowed Indexes" in the HEC token. Now it works fine 🙂

Thanks,

 

Moacir

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

How did you create the index?  On which instance was it created?

How does curl fail?  What error is returned?

---
If this reply helps you, Karma would be appreciated.
0 Karma

msilva
Path Finder

Hi,

I have forgotten to add it to "Select Allowed Indexes" in the HEC token. Now it works fine 🙂

Thanks,

 

Moacir

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...