I am trying use the dockers Splunk logging driver.
I created an HTTP Event Collector and token. I tried to test it using telnet, but I am not getting a response.
curl -k https://<INSTANCE>:8088/services/collector -H 'Authorization: Splunk <TOKEN>' -d '{"event":"Hello, World!"}'
but I am not getting a response.
I also tried to run the the docker container like this:
docker run <DOCKERNAME> -p 8080:5000 --name=<DOCKERNAME> -h XXX -d \
--log-driver=splunk --log-opt splunk-token=<HTTP_COLLECTOR_TOKEN> --log-opt splunk-url=https://<INSTANCE>:8088
but could not see the logs being sent.
So,
a) I don't see that the Splunk instance is listening
b) I don't see the logs.
Any idea what I am missing?
... View more