...f I use localhost or <server name> from within the server.
curl -k http://<servername>:8088/services/collector -H "Authorization: Splunk <token>" -d '{"event": "hello world a...
...uccessfully imported the JSON from a file with the above source type values, but, for some reason, when coming in through my HTTPEventCollector, the timestamp isn't picked up (that is, _time is not set...
I'm attempting to send a log event from a piece of Go code, but am receiving a connection refused error. If I use curl to send test data, I get an OK status back, but I don't see the data show up i...
I am trying to setup HEC for my indexer cluster (v8.0.7), with 2 indexers (and 3 search heads) managed by a master node. I read multiple docs and articles already, but I want to make sure I get s...
Hello, I am using HTTPEventcollector for one of the sources. And currently the data is getting indexed every Monday that is weekly once. Where can i change this interval settings ? Thanks
Hi all,
I am trying to send events to HEC locally via CLI and keep getting a SSL error. I have looked up several docs, but I have not yet found the solution to it. My problem is like this:
C...
Hi, I'm very new to splunk and have signed up for a trial account and am looking to connect with HTTPEventCollector using simple Curl commands. Following the docs here : https://d...
...bsp;
[http]
maxEventSize = <positive integer>[KB|MB|GB]
* The maximum size of a single HEC (HTTPEventCollector) event.
* HEC disregards and triggers a parsing error for events whose size is
g...
Hi,
I'm setting up an integration test between a third-party app and Splunk Cloud trail using an HTTPeventcollector. I have done this several times before without issue, but this time I can't f...
I have Splunk setup as an HTTPEventCollector receiver and am seeing parsing errors in splunkd.log like: ERROR HttpInputDataHandler - Parsing error .
How do I resolve these?