- Subscribe to RSS Feed
- Mark Question as New
- Mark Question as Read
- Float this Question for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Issue with PutSplunkHTTP - The requested URL was not found on this server
- Labels:
-
Apache NiFi
Created 03-21-2024 07:37 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello everyone,
I have an issue with PutSplunkHTTP processor trying to push some Sysmon logs to my Splunk Indexer.
Both NiFi and Splunk are in the same system (Windows).
I keep receiving an error:
"Error 404 - The requested URL was not found on this server"
I use curl from a Linux box and event is added:
curl -k http://ipaddress:8088/services/collector/raw?=a98d4602-3a79-4dbc-b733-0977d2aaaec7 -H "Authorization: Splunk <token>" -d '{"event": "Hello, world!", "sourcetype": "manual"}'
Using latest NiFi 2.0.0-M2 Release and Splunk
Any help would be appreciated.
Thank you.
Created 03-22-2024 07:00 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello,
Issue was resolved in NiFi's Slack Channel. Apparently I filled in username/password for Splunk in PutSplunkHTTP processor which are also passed in the final URL and are actually not needed. They were removed and now data go to Splunk via HEC.
Thanks
Created 03-21-2024 10:29 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@bibibo Welcome to the Cloudera Community!
To help you get the best possible solution, I have tagged our NiFi experts @SAMSAL @MattWho who may be able to assist you further.
Please keep us updated on your post, and we hope you find a satisfactory solution to your query.
Regards,
Diana Torres,Community Moderator
Was your question answered? Make sure to mark the answer as the accepted solution.
If you find a reply useful, say thanks by clicking on the thumbs up button.
Learn more about the Cloudera Community:
Created 03-22-2024 07:00 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello,
Issue was resolved in NiFi's Slack Channel. Apparently I filled in username/password for Splunk in PutSplunkHTTP processor which are also passed in the final URL and are actually not needed. They were removed and now data go to Splunk via HEC.
Thanks
