Connecting Notion Logs to Splunk

[WildHuckleberry]

Hello Splunkers!

I've encountered challenges while attempting to connect Notion logs to our Splunk instance.

Here's what I've tried:

1. Inserting the HEC URL with a public IP on our Splunk on-premise setup.
2. Activating the HEC URL and applying it to our Splunk Cloud Trial.

Unfortunately, both methods failed to establish the connection.

Has anyone successfully connected Notion logs with Splunk, either on-premise or through the Splunk Cloud Trial?

Thank you for your attention and support.

 

[ssanplunk · Accepted solution]

Hello,

Notion does not support On-premise OR Splunk Cloud Trial.

Only Support Splunk Cloud Enterprise.

If you use Splunk Cloud Enterprise, you need to enter the URL in the format below.

https://docs.splunk.com/Documentation/SplunkCloud/latest/Data/UsetheHTTPEventCollector

Send data to HTTP Event Collector on Splunk Cloud Platform
You must send data using a specific URI for HEC.

The standard form for the HEC URI in Splunk Cloud Platform free trials is as follows:

<protocol>://http-inputs-<host>.splunkcloud.com:<port>/<endpoint>
The standard form for the HEC URI in Splunk Cloud Platform is as follows:

<protocol>://http-inputs-<host>.splunkcloud.com:<port>/<endpoint>
The standard form for the HEC URI in Splunk Cloud Platform on Google Cloud is as follows:

<protocol>://http-inputs.<host>.splunkcloud.com:<port>/<endpoint>
The standard form for the HEC URI in Splunk Cloud Fedramp Moderate on AWS Govcloud is as follows:

<protocol>://http-inputs.<host>.splunkcloudgc.com:<port>/<endpoint>