@gcusello @PickleRick You are good, and I agree; I also know this might not the best option in general. But in Splunk Enterprise, sometimes, I use this option to send a few sample test events to TCP:9997 endpoint to have a quick test of the pipeline (data flow path). One of my clients has the Splunk Cloud, I don't see that option available. Do you know is there anything similar option Splunk Cloud offers. Regarding Collect command, I configured the Forward Data (see below) and use this simple SPL to push test events | makeresults | eval _raw="SPL-SEARCH-MAIN-001 generated from Splunk Search UI for main index" | eval source="/splunk/search/generated/main" | eval sourcetype="source:splunk:search-main" | eval host="source-splunk-search" | collect index=test_datapipeline output_format=hec addinfo=false cdCryptoMetrics_0-1783516933224.png
... View more
