Jump to content


Photo

Splunk Enterprise HEC not sending data

splunk splunkonline

  • Please log in to reply
No replies to this topic

#1 soujanyabargavi

soujanyabargavi
  • Members
  • 1 posts

Posted 30 July 2018 - 04:40 AM

I've installed the Splunk Enterprise trial. I've enabled the HTTP Event Collector feature as described here which enables sending machine data from my app into Splunk.
 
I tried to send a POST request using Postman to Splunk and got no response.
 
method: POST
url : http://localhost:8088/services/collector
Authorization : my generated token
 
Why there is no response if I already enabled the HEC feature? It seems that no server listens on that port at all.
What I don't understand about Splunk is -- where is my data stored? Is data for https://mindmajix.com/splunk-trainingEnterprise stored only locally and should be in use inside companies LAN network? Or Splunk's own servers in the cloud that stored all my data? Are Splunk Enterprise and Splunk Clouddifferent on that subject?