Create a HEC Token For splunk Enterprise & Splunk Cloud via the PostMan Tool

[PoojaDevi]

I ve came across a post where im trying to fetch the HEC Token via the REST API.

When I tried that locally Im getting the 404 Error. Kindly help on this

https://help.splunk.com/en/splunk-enterprise/get-started/get-data-in/9.3/get-data-with-http-event-co...

[livehybrid]

Hi @PoojaDevi 

Based on that HTML response you are hitting the Web UI port for Splunk and not the management port. Typically this runs on 8089 but as you are running port 8001 not 8000 for the Web port there is every chance yours is also different.

Are you running this locally or in a Docker container? Are there any local firewall restrictions that could be blocking 8089 when you try to use it?

Also - For Splunk Cloud the recommendation is to use Admin Config Service (ACS) - see https://help.splunk.com/en/splunk-cloud-platform/administer/admin-config-service-manual/9.2.2406/adm...

🌟 Did this answer help you? If so, please consider:

• Adding karma to show it was useful
• Marking it as the solution if it resolved your issue
• Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

[ITWhisperer]

You appear to be using port 8001 - have you tried port 8089 as suggested in the page you referenced?

[PoojaDevi]

I have hosted the splunk server in 8001 port. And when I tried with the 8089 port, I received the connection error.

[ITWhisperer]

Have you enabled the management port?