Unable to get data into Splunk Cloud using HEC

[namratakar76]

Hi All,

I am trying to get data into my Splunk Cloud trial account using HTTP event collector. After configuring the required steps for setting up HEC, I am executing the following command:

curl -k https://prd-<instance>.splunkcloud.com:8088/services/collector/event -H "Authorization: Splunk <token>"

However, I am getting the following error:

{"text": "The requested URL was not found on this server.","code":404}

Am I using the correct URL for this, or is this related to something in the configuration?  The tokens are enabled, and when I am checking the health of the instance, it returns this - {"text": "HEC is healthy","code":17}.

[richgalloway]

The standard form for the HEC URI in Splunk Cloud Platform free trials is:

https://http-inputs-<host>.splunkcloud.com:8088/<endpoint

See https://docs.splunk.com/Documentation/Splunk/8.2.4/Data/UsetheHTTPEventCollector#Send_data_to_HTTP_E...