Splunk Cloud

HTTP Event Collector: Unable to send data to the REST endpoint (Using Splunk Cloud Trial)

New Member

Hi,

I am trying out Splunk Cloud for an integration with a third-party application using the HTTP Event Collector.

I have created the Token and made the required configurations. But I am unable to send any data to the HEC. I'm using POST to send data, to this endpoint:

https://input-prd-p-<redacted>.splunkcloud.com:8088/services/collector

I have noticed there is no Global Setting option available in the trial version. Could that be a reason?

Any information regarding is will be helpful. Thanks in advance.

Labels (2)
0 Karma

Contributor

Have you checked this directly with something like CURL to check the connection and token?

curl -k "https://<yourHECAddress>.splunkcloud.com/services/collector/raw" \
-H "X-Splunk-Request-Channel: FE0ECFAD-13D5-401B-847D-77833BD77131"   -H "Authorization: Splunk <YOUR_TOKEN_HERE>" \
    -d '{"event": "Welcome to SplunkCloud", "sourcetype":"test"}'

Remove the  X-Splunk-Request-Channel if you arent using Acknowledgments.

Does this give any errors?

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!