- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Trying to get Fluentbit logs to send through HEC, but getting error?
xRusty9
Explorer
11-03-2022
02:38 AM
Hi there, appreciate if anyone could help me with these query.
I am trying to pump local file to splunk using fluentbit. The Splunk is currently https and secure.
I kept encountering error message of unexpected EOF, I am not sure what have I done wrongly in the fluent-bit.config file.
This is the screenshot of the splunk's general settting
Below is the fluent-bit.config that I used with the fluent-bit.exe..
Spoiler
[INPUT]
Name tail
Tag taglog
Path C:\*.json
[OUTPUT]
Name splunk
Match *
Host localhost
Port 443
Splunk_Token <The HTTP Event Collector token generated in Splunk Web>
TLS On
TLS.Verify On
http_user <The username login to Splunk Web>
http_passwd <The password used to login to Splunk Web>
splunk_send_raw On
Name tail
Tag taglog
Path C:\*.json
[OUTPUT]
Name splunk
Match *
Host localhost
Port 443
Splunk_Token <The HTTP Event Collector token generated in Splunk Web>
TLS On
TLS.Verify On
http_user <The username login to Splunk Web>
http_passwd <The password used to login to Splunk Web>
splunk_send_raw On
when i set the "TLS.Verify" to Off, it will have 303 http status code
