How to resolve HTTP event collector issue?

[uagraw01]

Hello Splunkers!!

I want to setup HEC token mechnaism. But After send some events to Splunk by using curl script. I am getting an error "{"text":"The requested URL was not found on this server.","code":404}" . Please help me to fix this issue.

default port 8088 is setup

token is also setup

Thanks in advance

[uagraw01]

@ITWhisperer I already tried but this, but not working

[PickleRick]

Don't put a slash at the end of the URL.

[uagraw01]

@PickleRick >curl -k http://127.0.0.1:8088/services/collector/event
{"text":"The requested URL was not found on this server.","code":404}
[IHT004][WALVAU-AGV-1][05-04-2023 8:21:11][C:\Users\viadmin]
>

I am getting the same error.

[PickleRick]

OK. So your Splunk server is running on Windows? And you did the HEC configuration how?

[uagraw01]

@PickleRick I got the issue and fix it. 

workaround : I installed the curl agent and setup the required environmental variable and after that it works fine.

[PickleRick]

What do you mean by "curl agent"? And what environmental variable?

[uagraw01 · Accepted solution]

@PickleRick Actually i disabled ssl from http event collect and used “http” in place of “https”. Forget the curl

[ITWhisperer]

Try /services/collector/event