About syedimranstonex

syedimranstonex · ‎09-07-2020

i found that /raw at the end makes it work Here's the URL thats working now curl -k -H "Authorization: Splunk <token>" http://<servername>:8088/services/collector/raw -d "testing"

syedimranstonex · ‎09-05-2020

No. It’s my windows machine where from where I use the splunk web console. I tried curl on a different Linux server in d same network, got 404 again. Basically http://<servername>:8088 doesn’t seem to be working anywhere outside the splunk server.

syedimranstonex · ‎09-05-2020

Well the Curl on the url Gives a successful response when tried on the server. And I see the hello world on splunk web console as well. The issue is when I try to curl from outside the server in the same network. i am using splunk enterprise 8.0.3 running on red hat Linux 7.x 64-bit os

syedimranstonex · ‎09-04-2020

Nothing that helps on the splunk logs.

syedimranstonex · ‎09-04-2020

Added /event at the end of the URL .This also returns 404 from outside the server but works inside the server. I did not see the acceptFrom parameter in the output of splunk btool inputs list http —debug

syedimranstonex · ‎09-04-2020

I verified that the firewalld is not running on the server and there are no iptables entry on the server.

syedimranstonex · ‎09-04-2020

I have set up a Splunk Enterprise trial instance on a red-hat Linux server. I enabled and setup the HEC, however when I try the curl command to check: Case 1: I get a successful response if I use localhost or <server name> from within the server. curl -k http://<servername>:8088/services/collector -H "Authorization: Splunk <token>" -d '{"event": "hello world again"}' {"text":"Success","code":0} Case 2: I get a 404 error when I use the <servername> in the command from outside the server curl -k http://<servername>:8088/services/collector -H "Authorization: Splunk <token>" -d '{"event": "hello world again"}' {"text":"The requested URL was not found on this server.","code":404} I verified that the outside world can telnet the port 8088 on the server. Also, the console opens on port 8000. Are there any changes I need to make on the server? Or any configs on the Splunk end?

Posts	7
Solutions	1
Karma Given	0
Karma Received	0
Member Since	‎09-01-2020

Online Status	Offline
Date Last Visited	‎09-07-2020 01:39 PM

Splunk HTTP Event Collector works only on localhos...

Re: Splunk HEC works only on localhost

Re: Splunk HEC works only on localhost

Re: Splunk HEC works only on localhost

Re: Splunk HEC works only on localhost

Re: Splunk HEC works only on localhost

Re: Splunk HEC works only on localhost

Splunk HTTP Event Collector works only on localhos...