Leina 
Wanta 
Record a Structured Event
Send explicit event data and source metadata.
/oo Splunk HTTP Event Collector: Send Splunk HEC event [JSON] with host [host], source [source], sourcetype [type], and index [index].
Connect Splunk HTTP Event Collector to Your AI Agent
Send structured JSON events or raw text to a configured public Splunk HTTP Event Collector. Ask your connected AI assistant to explain the results or carry out the specified operation.
2 tools API key
Try a Splunk HTTP Event Collector Task
Copy a prompt into your agent with the oo Skill installed. Add your page links and source notes before running it.
oo Skill Splunk HTTP Event Collector
Record a Raw Line
Ingest a supplied text event with explicit source context.
/oo Splunk HTTP Event Collector: Send Splunk HEC raw event [text] with source [source] and sourcetype [type].
Start Working with Splunk HTTP Event Collector
-
Install OOMOL
Set up oo CLI and the oo Skill in your agent.
Install OOMOL → -
Connect Splunk HTTP Event Collector
Provide a Splunk HEC token and public HTTPS HEC origin.
Connect Splunk HTTP Event Collector → -
Give Your Agent a Task
Use /oo with the pages to read, the changes to make, and where to save the result.
Connection Guide →
Choose Your Agent
- A Splunk HEC token and public HTTPS HEC origin.
- These actions ingest events; they do not search Splunk logs. Index and source settings should match token permissions.
Splunk HTTP Event Collector Tools
Splunk HTTP Event Collector connects supported service operations to your AI assistant. Send structured JSON events or raw text to a configured public Splunk HTTP Event Collector.
Event Ingestion
Submit structured JSON or raw text events.
2 tools
Send Event
Send one structured event to the connected Splunk HTTP Event Collector.
splunk_http_event_collector.send_event Send Raw Event
Send one raw text event to the connected Splunk HTTP Event Collector.
splunk_http_event_collector.send_raw_event No matching tools.
Frequently Asked Questions
Can I query logs with HEC?
These actions ingest events; search is a separate Splunk API capability.
What URL should I provide?
Use the public HTTPS origin of the HEC service with its configured port.
Can I choose an index?
Provide index if the HEC token is authorized to write to it.