HI
Set up the add on on a cloud instance. Not seeing any data come in via HEC. Any ideas on how to troubleshoot?
Thanks
Start by checking the logs
These can also be set via the GUI
$SPLUNK_HOME/bin/splunk set log-level HTTPServer -level DEBUG
$SPLUNK_HOME/bin/splunk set log-level HttpInputDataHandler -level DEBUG
$SPLUNK_HOME/bin/splunk set log-level TcpInputProc -level DEBUG
Remember to set back to WARN once you have finished debugging
Then search - this may give you some clues for you to further investigate
index=_internal source=*splunkd.log* (component=HttpInputDataHandler OR component=TcpInputProc OR component=HTTPServer)