Data & KV Store • Room 3

HTTP Event Collector (HEC)

The HTTP Event Collector (HEC) enables external applications to send data directly to Splunk over HTTPS using a simple token-authenticated JSON POST request.

HEC is the modern, scalable method for ingesting data from cloud services, IoT devices, or custom applications without installing a forwarder.

Knowledge Check

Prove your understanding to clear the room (Rewards XP)

List all currently configured HEC tokens by querying the REST API: `| rest /services/data/inputs/http`.

Splunk Search Bar