Oh and if i use curl to send a test splunk HEC message, it works fine.