This post is the first search result on google, so I'm reviving it. I kept getting this error when making a curl command from the box itself: root@splunk:/opt/splunk/bin# curl http://localhost:8088/services/collector/event/ -H "Authorization: Splunk $TOKEN" -d '{ "event": { "stuff": "value" } }' {"text":"The requested URL was not found on this server.","code":404} Well, after reading ALL the posts, I tracked it down to the extra "/" on the end, so this works: root@splunk:/opt/splunk/bin# curl http://localhost:8088/services/collector/event -H "Authorization: Splunk $TOKEN" -d '{ "event": { "stuff": "value" } }' {"text":"Success","code":0} root@splunk:/opt/splunk/bin# I have verified my wall is very sturdy. Or at least it was yesterday. ... View more

A new version (3.0.8) of the Layer8 App for Splunk is now live. There are a number of improvements to the data filtering that allow for quicker and more flexible data filtering that help with pinpointing Citrix-specific data. Now, almost all input fields accept wildcards, and the Session field lists options to select all RDP and ICA session types. ... View more