I'm doing POC using Splunk Trail and HEC to ingest audit log from Enterprise CMS [Sitecore], Sitecore doesn't support Authorization Header. So, I would like to enable query string authorization for my trail splunk cloud instance. But I'm unable to create ticket as one of the option is loading, tried call etc. But no luck. Can anyone help me getting connected to  splunk support? " For Splunk Cloud, you must open a Splunk Support ticket to set allowQueryStringAuth to true. Support for a toggle in Splunk Web for this setting is planned for a future release. As per above comment, this configuration is added in splunk web? I couldn't find it. But might be looking at wrong place. Thanks, appreciate your help! ... View more

@wittenst1234 Thank you. These worked great. ... View more