Splunk Cloud HEC endpoint address do not resolve

692 Views Asked by At

I have just created a Splunk Cloud trial account.

I can access perfectly to console with an URL in the form https://prd-p-naaaa.splunkcloud.com where naaaa is a digit and 4 letters.

I have configured an HEC token following the instructions here

But this do not shown the endpoints to use. I have checked the docs in here, and I assume that my HEC endpoint is:

https://http-inputs-prd-p-naaaa.splunkcloud.com

But this address is not DNS resolved.

I have also tried other alternatives, as dot instead minus

https://http-inputs.prd-p-naaaa.splunkcloud.com

Any comment or suggestion will be welcome

2

There are 2 best solutions below

1
On BEST ANSWER

Answering my own question:

In Splunk Cloud Trial the HEC endpoint is in the same host (without prefix) and port 8088.

So, the URL is, in my case,

https://prd-p-naaaa.splunkcloud.com:8088/services/collector

1
On

Try https://http-inputs-prd-p-naaaa.splunkcloud.com:443. The "http-inputs" part does not change if you use a secure connection.