2 Home
gitea_admin edited this page 2026-03-11 14:40:20 +00:00

Splunk HEC Sink

The Splunk HEC sink allows to send data to Splunk using the https://docs.splunk.com/Documentation/Splunk/latest/Data/UsetheHTTPEventCollector[HTTP Event Collector].

Metadata

Property Value
Type sink
Group SPLUNK
Namespace Monitoring
Support Level Stable
Provider Apache Software Foundation

Properties

Name Type Required Default Description
splunkUrl string The URL of your Splunk server. No need to set the protocol prefix.
token string The Token of the HEC. Note it is not the user's authentication token.
hostPayload string The host field set in the data sent to Splunk, it is not related to the Splunk URL or the connection to Splunk server.
bodyOnly boolean false Send to Splunk only data contained in the body.
headersOnly boolean false Send to Splunk only data contained in the headers.
index string Splunk index to write to.
source string The source named field of the data.
sourceType string The source named field of the data.
skipTlsVerify boolean false Skip TLS verification.
https boolean true Use a secure HTTPS connection.
time string Time this even occurred. By default, the time will be when this event hits the splunk server.

Dependencies

  • camel:core
  • camel:splunk-hec
  • camel:kamelet