...
If you have different staff for administering Splunk and SAP Basis, hand-over the following values to the SAP Basis team or your service provider:
Parameter | Value | Comment |
|---|---|---|
HEC Index Name | sap (or custom) | |
HEC Token | <value> | Token value as mentioned above. |
HEC Endpoint URL | http://<Splunk Hostname> | for a non-SSL setup. |
HEC Enpoint URL SSL | https://<Splunk Hostname> | for an SSL setup. |
TCP Port | 8088 (Splunk Enterprise default) 443 (Splunk Cloud default) | If a different port is configured, please use this one. |
SSL Certificate | corresponding *.CER-file | Only if an SSL setup is intended. |
If you use an SSL encrypted connection you probably need to follow these steps for configuring SSL. Otherwise the next step would be to create a role allowing you to access the index we created before.