Skip to main content
Solved

How can I add Humio as an Elasticsearch destination?

  • March 11, 2025
  • 1 reply
  • 10 views
Erin Sweeney
Forum|alt.badge.img

I believe I correctly added Humio as an Elasticsearch destination, it's showing as healthy (green check in my screenshot). However when I test it, I get the error "Error: Send failed: SyntaxError: Unexpected token < in JSON at position 0, status: Sender is blocked
Details: undefined" Not sure what I'm doing wrong, any suggestions?

297_244d841b69964f9cbb1a44b24e7994d3.png

Best answer by Brendan Dalpe

Humio Elasticsearch does not support discovery of the Elastic version. By default, Cribl Stream will attempt to discover the Elasticsearch version. You can disable this under the Cribl Stream Elasticsearch destination under the Advanced Settings. Set the Elasticsearch version to 7.X and the error will resolve.

Humio recommends using HEC for better scalability. See this blog post by Cribl SE Alex Cain for more info on how to set Cribl Stream with Humio.

    1 reply

    B
    • Brendan Dalpe
    • Inspiring
    • Answer
    • March 11, 2025

    Humio Elasticsearch does not support discovery of the Elastic version. By default, Cribl Stream will attempt to discover the Elasticsearch version. You can disable this under the Cribl Stream Elasticsearch destination under the Advanced Settings. Set the Elasticsearch version to 7.X and the error will resolve.

    Humio recommends using HEC for better scalability. See this blog post by Cribl SE Alex Cain for more info on how to set Cribl Stream with Humio.

    Terms & ConditionsAccessibility statement