So I'm unable to get HEC logs into Splunk Cloud (version 9.1.2312.102). When I test the HECs in Postman via: (obviously didn't enter my domain or token for privacy reasons). POST https://http-inputs-mydomain.splunkcloud.com:443/services/collector/raw with the Authorization Header of "Splunk mytoken" It works as expected and I receive a "text":Success , "code": 0 response, which is good. I can also see the event in Splunk when I search it. I did this invidivdually for each HEC that I've created, and they all work....however, whenever I go to setup the actual HECs via the applications I'm trying to integrate...I get nothing. I'm trying to send logs from Dashlane, FiveTran, Knowbe4, and OneTrust. All of these support native Splunk integrations, I enter the information as requested on their external logging setup and nothing shows in Splunk. I'm not sure what to do here. Any guidance would be awesome! Thanks in advance!
... View more
