search

splunk / rpm_app_for_splunk

3 stars 4 forks source link

Unable to push logs into Splunk #2

Open archashaji1 opened 1 year ago

archashaji1 commented 1 year ago

Hi,

We are using Splunk Cloud as our SIEM solution. We are trying to ingest the uipath execution logs from our AWS instance into Splunk. We installed the app 'https://splunkbase.splunk.com/app/6551' in our search head. Created a HEC token and also created an index 'uipath' in search head. In Uipath server, we added following details in webhook configuration:

Name: Splunk
Description: Sending uipath execution logs into Splunk
URL : https://http-inputs-deliveroo.splunkcloud.com:443
SSL Verification : Enabled
Secret : <HEC token ID>

Still we are not receiving logs into Splunk. Could you please let us know what went wrong in this configuration?

Much appreciated, Archa

helpwanted

AyyoubBenoudina commented 8 months ago

did you get any answer?