- Find Answers
- :
- Splunk Platform
- :
- Splunk Cloud Platform
- :
- Enable http event collector
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How can I use the HTTP event collector in Splunk cloud 15 days trial? Also, will my instance be disabled after the trial?
I followed the instructions here but I got {"text": "Data channel is missing", "code":10} and Could not resolve host: when I tried the URLs `https://http-inputs-prd-p-xxxxx.splunkcloud.com:443/services/collector/event` and https://prd-p-xxxxx.splunkcloud.com:8088/services/collector/event respectively.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The first request sounds almost right, but the token has Acknowledgement turned on so need to either turn that off or add a request channel (In curl this would be something like
-H "X-Splunk-Request-Channel: FE0ECFAD-13D5-401B-847D-77883AD77131"
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The first request sounds almost right, but the token has Acknowledgement turned on so need to either turn that off or add a request channel (In curl this would be something like
-H "X-Splunk-Request-Channel: FE0ECFAD-13D5-401B-847D-77883AD77131"
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks. Logging now works as expected. What happens when my trial period elapses? Does my instance get erased or will I have reduced logging functionalities?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Unfortunately I think you will lose access to it. It may be worth speaking to the sales team to see if it can be extended?
Glad its working!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks.🙂
Enterprise Security Content Update (ESCU) | New Releases
Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?
Index This | What are the 12 Days of Splunk-mas?
