Splunk HTTP Event Collector (HEC) API

The Splunk HTTP Event Collector (HEC) is a high-performance REST API data input that accepts JSON or raw text data sent over HTTP or HTTPS. It uses token-based authentication and provides endpoints for sending events (/services/collector/event), raw data (/services/collector/raw), and checking indexing status (/services/collector/ack).

API entry from apis.yml

apis.yml Raw ↑
aid: splunk:splunk-http-event-collector-api
name: Splunk HTTP Event Collector (HEC) API
description: The Splunk HTTP Event Collector (HEC) is a high-performance REST API data input that accepts
  JSON or raw text data sent over HTTP or HTTPS. It uses token-based authentication and provides endpoints
  for sending events (/services/collector/event), raw data (/services/collector/raw), and checking indexing
  status (/services/collector/ack).
humanURL: https://docs.splunk.com/Documentation/Splunk/latest/Data/UsetheHTTPEventCollector
tags:
- Data Ingestion
- Events
- HEC
- Logging
- REST
properties:
- type: Documentation
  url: https://docs.splunk.com/Documentation/Splunk/latest/Data/UsetheHTTPEventCollector
- type: APIReference
  url: https://docs.splunk.com/Documentation/SplunkCloud/latest/Data/HECRESTendpoints
- type: Documentation
  url: https://docs.splunk.com/Documentation/SplunkCloud/latest/Data/FormateventsforHTTPEventCollector
  title: Event Format
- type: Documentation
  url: https://docs.splunk.com/Documentation/SplunkCloud/latest/Data/HECExamples
  title: HEC Examples
- type: GettingStarted
  url: https://dev.splunk.com/view/event-collector/SP-CAAAE6M