×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
sito82viso
New Member
Member since: ‎10-26-2018
‎06-05-2020
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎10-26-2018
View All

Re: Can someone help us with our HTTP event collec...

by in Getting Data In
‎10-28-2018 11:30 PM
‎10-28-2018 11:30 PM
Hi @iamarkprabha, as index name and token haven't been modified so we can discard these reason. The main problem is that we aren't able to check how it is the syntax of the http request that the system sends, so we thought that the best solution should be to check on the Splunk server side. Do you know if splunk has a log file where we could check the syntax of the malformed http request? Thank you ... View more

Can someone help us with our HTTP event collector ...

by in Getting Data In
‎10-26-2018 09:59 AM
‎10-26-2018 09:59 AM
Hi all, Does anybody know which is the file logs where we could check if the syntax of a HTTP post request is correct? Our issue is that our system sent an HTTP POST to Splunk and it received a 400 error. We see that this message could be: 1 5 400 Bad Request No data 6 400 Bad Request Invalid data format 7 400 Bad Request Incorrect index ... 0 400 Bad Request Data channel is missing 11 400 Bad Request Invalid data channel 12 400 Bad Request Event field is required 13 400 Bad Request Event field cannot be blank 14 400 Bad Request ACK is disabled 15 400 Bad Request Error in handling indexed fields 16 400 Bad Request Query string authorization is not enabled Anybody know how we could check the status code of the bad requests? Thank you, Best Regards ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM