Splunk
// TODO This documentation is still work in progress.
What is Splunk?
Software for searching monitoring and analyzing machine-generated big data. Splunk can capture index and correlate real-time data in a searchable repository.
Description
The Splunk channel will log all events to a HTTP Event Collector (HEC).
Syntax
[channel.<you_choose>]
type="splunk"
Arguments in configuration file
There are 3
arguments in Splunk channel:
argument | default setting | explanation |
---|---|---|
endpoints |
none | Set your serverURLs. |
token |
none | Set your Splunk token . |
verify |
none | false will disable certificate validation. |
Example
[channel.splunk01]
type="splunk"
endpoints=["https://127.0.0.1:8088"]
token="{splunk_token}"
verify=false
Availability
Linux | MacOS |
---|---|
yes |
yes |