Specifically, your: search index'indexname' Needs to be URL encoded. header 'Content-Type: application/json' \ Solution ineeman Splunk Employee 02-03-2012 04:43 PM The problem here is because your request isn't URL encoded. When I execute provided CURL request without the port number, it works. We are using the Splunk Cloud instance and believe that we do not need to specify the port number. Youll need a CLI tool for issuing REST commands, such as curl. Please note that Splunk Cloud customers do NOT need to specify port 8088, all HEC traffic goes over port 443 (standard SSL).įor customers running HEC on their own deployments or using the Splunk test drive instance, then port 8088 will need to be specified: The Splunk REST API is a powerful portal for monitoring, querying, and managing Splunk. If you are using AWS Firehose, then you will have a second HEC URL: I'm using Splunk enterprise Version: 8.2.7 I'm trying to get a session key then run a search through the rest api. Splunk will expect the information below, which is the basic.
The examples on this page use the curl command.
#Splunk curl how to#
You can use these examples to model how to send your own data to HEC in either Splunk Cloud Platform or Splunk Enterprise. They also show how you must send data to the HEC input. As per the Splunk community post: “For Splunk Cloud customers, the standard HEC URI is: The following examples show how you can use HEC to index streams of data.
0 kommentar(er)
