Error "failure: Unclassified Error" when Creating Splunk Cloud Log Stream
Last Updated:
Administration
Okta Identity Engine
Overview
When attempting to create a Splunk Cloud Log Stream, the following error message may be encountered:
failure: Unclassified Error
Applies To
- Log Streaming
- Splunk
Cause
The Indexer Acknowledgement setting for the HTTP Event Collector (HEC) token is set to true.
Solution
Change the Indexer Acknowledgement setting for the HTTP Event Collector (HEC) token to false by following the steps below:
- Go to Settings > Data > Data Inputs.
- Click HTTP Event Collector.
- Find the correct HTTP Event Collector.
- Click Edit.
- Uncheck Enable indexer acknowledgment.
- Click Save. The following success message should be seen:
"{ "text": "Success", "code": 0 } "
