Splunk Enterprise

HEC with PUT request

nsmylie
Observer

I am trying to setup my Kemp load balancer to send WAF logs using json format.  I configured the HEC token, enabled it to use the query string format for example:

http://X.X.X.X:8088/services/collector/event?token=XXXX

I see the request go out, it is a PUT command.

Splunk server is rejecting it because it only allows:

Allow: POST,OPTIONS

If this is configurable, I am all ears, thank you!

Labels (2)
0 Karma
Get Updates on the Splunk Community!

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

The Latest Cisco Integrations With Splunk Platform!

Join us for an exciting tech talk where we’ll explore the latest integrations in Cisco + Splunk! We’ve ...

AI Adoption Hub Launch | Curated Resources to Get Started with AI in Splunk

Hey Splunk Practitioners and AI Enthusiasts! It’s no secret (or surprise) that AI is at the forefront of ...