Zoom integration with Splunk via HEC not working

API and Webhooks
,
1

Hi,

We are trying to integrate Zoom into Splunk through HEC on a local heavy forwarder. It did pass through the URL validation. I have added allowQueryStringAuth = true in input.conf. However, we are seeing -12 status code in the webhook app call logs. Please let us know how we can solve this issue.

Thanks

2

Hi @Bhagyashri
Thanks for reaching out to us and welcome to the Zoom developer forum!
Have you tried reaching out to Splunk? they should be able to troubleshoot that error

3

Hi Elisa,

Yes have reached out to splunk about this and it was verified that we have valid hec token, have the necessary inputs.conf setting and have necessary allowlisting done for port 443. The status code -12 I am seeing is in zoom call logs. Does this require any kind of signed cert on splunk host?

Thanks
Bhagyashri

4

I will send you a DM, please follow up there

5

Hi @elisa.zoom I have not received DM from you yet. I can share the screenshot to understand the issue further.

6

Let me re send it :slight_smile: @Bhagyashri