I'm configuring what I believe is the first scenario here: http://dev.splunk.com/view/event-collector/SP-CAAAE73#scen1
I'm stuck at setting the indexes for this input. As I'm running an indexer c...
Hi all,
I have this question and couldn't find the answers so far so posting here in hoping to find some knowledge.
Q1) When a universal forwarder sends logs based in inputs.conf/ http even collector...
I'm learning how to use the HTTPEventcollector, but no events ever show up in search. I have the inputs enabled and my token set up as shown: When I run the command 'curl -k http://<i...
...input, token name=linux_rh, channel=n/a, source_IP=10.177.155.14, reply=9, events_processed=18, http_input_body_size=8405, parsing_err="Server is busy"
There was 7 messages of this kind d...
...s, ensured it is enabled) Create an HTTPEventCollector via Settings > Data Inputs > HTTPEventCollector Attempt to run a curl to the hec Public IP Address Azure R...
Hi,
I am trying to load JSON data via cURL into an HTTPEventCollector. I know that I am reaching the service and getting a response, but it is always the same:
{"text":"Error in handling index...
I have HttpEventCollectorinputs defined on an indexer cluster. I need to send one of the tokens' data to a different indexer. _TCP_ROUTING in inputs, plus an outputs.conf def?
If so, what m...
Hi people.
I'm attempting to submit an event over HEC to an index called dev_game-publishing.
This looks like:
curl -k 'https://so1:8088/services/collector/event?index=dev_game-p...
Symptom of the problem:
When configuring a http_collector input with an outputs.conf group in an active splunk indexer, It looks like, the indexer in question forwards the events received from o...