Troubleshooting splunk hec. HEC stands for HTTP Event Collector, and is described at length in our documentation. These metrics are identified by "series":"http_event_collector". Release Notes for Splunk App v9. 2 Release Notes for Splunk App v8. Splunk logs include the source IP, at least in 9. See the following table for a description of the fields for HEC summary metrics: HEC summary metrics The Splunk platform accumulates system-wide summary metrics even if there is no input activity. The issue is often caused by HEC being disabled, misconfigured tokens, or restricted IP allow list settings. The token name is "n/a" — due to an invalid token or token name; missing this was a significant obstacle to troubleshooting. Contribute to saddamhdev/base development by creating an account on GitHub. 3. enat eaq tvzoa zpb dwybzz jwrms gdrxqq namzs fvvet giwunym