Dashboards & Visualizations

Need help generating Http Event Collector Token

garyfj
New Member

Hi all, I can't seem to generate a HEC token.

Help is appreciated

alt text

0 Karma

manjunathmeti
SplunkTrust
SplunkTrust

Set App Context to "splunk_httpinput" app in Input Settings.

If you use search app then updates will be written to:
C:\Program Files\Splunk\etc\apps\search\local\inputs.conf

0 Karma

jethrop
Explorer

The account that splunk is running as, does it have rights in that denied directory? Also, to test, have you tried creating this with an admin account to check it's not a weird permissions problem?

0 Karma

garyfj
New Member

The account does have full access to the directory. I am also creating the token with an admin account.

I'm looking at two conf files for this but there doesn't seem to be permission issues

C:\Program Files\Splunk\etc\apps\splunk_httpinput\default\inputs.conf
C:\Program Files\Splunk\etc\deployment-apps\splunk_httpinput\local\inputs.conf

0 Karma

jethrop
Explorer

Splunk version?

anything more in splunkd.log?

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Splunk is officially part of Cisco

Revolutionizing how our customers build resilience across their entire digital footprint.   Splunk ...

Splunk APM & RUM | Planned Maintenance March 26 - March 28, 2024

There will be planned maintenance for Splunk APM and RUM between March 26, 2024 and March 28, 2024 as ...