{
  "apiVersion": "camel.apache.org/v1",
  "kind": "Kamelet",
  "metadata": {
    "name": "splunk-hec-sink",
    "annotations": {
      "camel.apache.org/kamelet.support.level": "Stable",
      "camel.apache.org/catalog.version": "4.22.1",
      "camel.apache.org/kamelet.icon": "data:image/svg+xml;base64,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",
      "camel.apache.org/provider": "Apache Software Foundation",
      "camel.apache.org/kamelet.group": "SPLUNK",
      "camel.apache.org/kamelet.namespace": "Monitoring"
    },
    "labels": {
      "camel.apache.org/kamelet.type": "sink"
    }
  },
  "spec": {
    "definition": {
      "title": "Splunk HEC Sink",
      "description": "The Splunk HEC sink allows to send data to Splunk using the https://docs.splunk.com/Documentation/Splunk/latest/Data/UsetheHTTPEventCollector[HTTP Event Collector].",
      "required": [
        "splunkUrl",
        "token"
      ],
      "type": "object",
      "properties": {
        "splunkUrl": {
          "title": "Splunk URL",
          "description": "The URL of your Splunk server. No need to set the protocol prefix.",
          "type": "string",
          "example": "my_server.splunkcloud.com:8088"
        },
        "token": {
          "title": "Token",
          "description": "The Token of the HEC. Note it is not the user's authentication token.",
          "type": "string",
          "format": "password",
          "x-descriptors": [
            "urn:camel:group:credentials"
          ]
        },
        "hostPayload": {
          "title": "Host of the Event",
          "description": "The host field set in the data sent to Splunk, it is not related to the Splunk URL or the connection to Splunk server.",
          "type": "string"
        },
        "bodyOnly": {
          "title": "Body Only",
          "description": "Send to Splunk only data contained in the body.",
          "type": "boolean",
          "default": false
        },
        "headersOnly": {
          "title": "Headers Only",
          "description": "Send to Splunk only data contained in the headers.",
          "type": "boolean",
          "default": false
        },
        "index": {
          "title": "Index",
          "description": "Splunk index to write to.",
          "type": "string"
        },
        "source": {
          "title": "Source",
          "description": "The source named field of the data.",
          "type": "string"
        },
        "sourceType": {
          "title": "Source Type",
          "description": "The source named field of the data.",
          "type": "string"
        },
        "skipTlsVerify": {
          "title": "Skip TLS Verification",
          "description": "Skip TLS verification.",
          "type": "boolean",
          "default": false
        },
        "https": {
          "title": "Secure",
          "description": "Use a secure HTTPS connection.",
          "type": "boolean",
          "default": true
        },
        "time": {
          "title": "Time",
          "description": "Time this event occurred. By default, the time is when this event hits the Splunk server.",
          "type": "string"
        }
      }
    },
    "types": {
      "in": {
        "mediaType": "application/json"
      }
    },
    "dependencies": [
      "camel:core",
      "camel:splunk-hec",
      "camel:kamelet"
    ],
    "template": {
      "from": {
        "uri": "kamelet:source",
        "steps": [
          {
            "to": {
              "uri": "splunk-hec:{{splunkUrl}}",
              "parameters": {
                "host": "{{?hostPayload}}",
                "token": "{{token}}",
                "bodyOnly": "{{?bodyOnly}}",
                "headersOnly": "{{?headersOnly}}",
                "index": "{{?index}}",
                "source": "{{?source}}",
                "sourceType": "{{?sourceType}}",
                "skipTlsVerify": "{{?skipTlsVerify}}",
                "https": "{{?https}}",
                "time": "{{?time}}"
              }
            }
          }
        ]
      }
    }
  },
  "propertiesSchema": {
    "$schema": "http://json-schema.org/draft-07/schema#",
    "type": "object",
    "title": "Splunk HEC Sink",
    "description": "The Splunk HEC sink allows to send data to Splunk using the https://docs.splunk.com/Documentation/Splunk/latest/Data/UsetheHTTPEventCollector[HTTP Event Collector].",
    "required": [
      "splunkUrl",
      "token"
    ],
    "properties": {
      "splunkUrl": {
        "type": "string",
        "title": "Splunk URL",
        "description": "The URL of your Splunk server. No need to set the protocol prefix."
      },
      "token": {
        "type": "string",
        "title": "Token",
        "description": "The Token of the HEC. Note it is not the user's authentication token.",
        "format": "password"
      },
      "hostPayload": {
        "type": "string",
        "title": "Host of the Event",
        "description": "The host field set in the data sent to Splunk, it is not related to the Splunk URL or the connection to Splunk server."
      },
      "bodyOnly": {
        "type": "boolean",
        "title": "Body Only",
        "description": "Send to Splunk only data contained in the body.",
        "default": false
      },
      "headersOnly": {
        "type": "boolean",
        "title": "Headers Only",
        "description": "Send to Splunk only data contained in the headers.",
        "default": false
      },
      "index": {
        "type": "string",
        "title": "Index",
        "description": "Splunk index to write to."
      },
      "source": {
        "type": "string",
        "title": "Source",
        "description": "The source named field of the data."
      },
      "sourceType": {
        "type": "string",
        "title": "Source Type",
        "description": "The source named field of the data."
      },
      "skipTlsVerify": {
        "type": "boolean",
        "title": "Skip TLS Verification",
        "description": "Skip TLS verification.",
        "default": false
      },
      "https": {
        "type": "boolean",
        "title": "Secure",
        "description": "Use a secure HTTPS connection.",
        "default": true
      },
      "time": {
        "type": "string",
        "title": "Time",
        "description": "Time this event occurred. By default, the time is when this event hits the Splunk server."
      }
    }
  }
}