I have a splunk cloud stack which has HEC enabled on it and I am referring following page to send data via HEC:
http://dev.splunk.com/view/event-collector/SP-CAAAE7G
which have mentioned 3 ways:
1. HTTP Authentication
2. Basic authentication
3. Query string
Among them, 1 and 2 are working properly. But when I tried to send data via "Query string" it gives following Error:
{"text":"Query string authorization is not enabled","code":16}
The curl command I tried is as follow:
curl -k https://http-inputs-STACK_NAME.splunkcloud.com/services/collector/event?token=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx -d '{"event": "hello world"}'
Any idea regarding How to enable the "Query string" in cloud stack?
... View more