Skip to content

Log In to Splunk Cloud Platform or Splunk Enterprise

This guide will help you log into Splunk Cloud Platform or Splunk Enterprise and obtain an HEC token for the ThousandEyes stream.

Choose Your Splunk Platform

If you're using Splunk Cloud Platform:

Log In to Splunk Cloud

  • Navigate to your Splunk Cloud instance URL (e.g., https://your-instance.splunkcloud.com)
  • Enter your username and password
  • Click Sign In

Trial Account Limitation

If you're using a Splunk Cloud trial account, you won't be able to stream ThousandEyes data due to the issue

If you're using Splunk Enterprise (on-premises):

Log In to Splunk Enterprise

  • Navigate to your Splunk Enterprise web interface (typically https://your-server:8000)
  • Enter your username and password
  • Click Sign In
  • Access the Splunk Show https://splunk.show/te-splunk splunk show
  • Sign in to splunk.com (Register if you don't have an account)
  • Enroll event ThousandEyes Integration Workshop Enroll event
  • Once the event starts, you will see the instance information with the URL and credentials to access the Splunk instance Splunk instance info

Get Splunk HEC Token

HTTP Event Collector (HEC) tokens are required to send data to Splunk from external sources like ThousandEyes.

  • In Splunk Web, go to Settings in the top menu
  • Click Data Inputs under the "Data" section
  • Click HTTP Event Collector
  • Click New Token button
  • Configure the token settings
  • Give a name: ThousandEyesToken
  • Click Submit to create the token
  • Copy the HEC Token

Hec Token

Identify HOST of your Splunk instance

  • Splunk Enterprise: The host is typically the server name or IP address where Splunk is installed. For example, if you Splunk web page is https://te-test-i-03af7829c8bab4176.splunk.show/en-GB/app/launcher/home, your host will be: te-test-i-03af7829c8bab4176.splunk.show
  • Splunk Cloud Platform: The host is the URL of your Splunk Cloud instance. For example, if your Splunk Cloud URL is https://your-instance.splunkcloud.com, your host will be your-instance

Add HEC Token and Host to Bruno Variables

Now that you have your Splunk HEC token, add it to your Bruno collection variables:

  • In Bruno, navigate to your ThousandEyes Splunk Integration collection
  • Go to the Variables tab
  • Find the variable named Splunk_HEC_token in the list
    • In the Value column, paste your HEC token
  • Find the variable named Splunk_host in the list
    • In the Value column, enter your Splunk host
  • Click Save to apply the changes

Splunk Enterprise Variables

Requirements

URL must be reachable and secure. More info