Splunk Cloud HEC endpoint address do not resolve

Question

I have just created a Splunk Cloud trial account.

I can access perfectly to console with an URL in the form https://prd-p-naaaa.splunkcloud.com where naaaa is a digit and 4 letters.

I have configured an HEC token following the instructions here

But this do not shown the endpoints to use. I have checked the docs in here, and I assume that my HEC endpoint is:

But this address is not DNS resolved.

I have also tried other alternatives, as dot instead minus

Any comment or suggestion will be welcome

score 3 · Accepted Answer · answered Jul 31 '22 at 08:12

3

Answering my own question:

In Splunk Cloud Trial the HEC endpoint is in the same host (without prefix) and port 8088.

So, the URL is, in my case,

answered Jul 31 '22 at 08:12

Sourcerer

score 0 · Answer 2 · answered Jul 30 '22 at 12:31

0

Try https://http-inputs-prd-p-naaaa.splunkcloud.com:443. The "http-inputs" part does not change if you use a secure connection.

answered Jul 30 '22 at 12:31

RichG

Thank you for checking, but I was already using http-... (my fault when transcrypt). The problem is with DNS resolving. It does resolve http-inputs-prd-p-naaaa.splunkcloud.com. And again, thank you for checking!!! (I have corrected my question to set http-inputs) – Sourcerer Jul 30 '22 at 19:20

2 Answers2